last executing test programs: 1m29.898143794s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 1m28.510824353s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m15.082599352s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 1m14.231066803s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 59.667216135s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 58.666380136s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 44.277420643s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 43.222605913s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 30.679227587s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 27.854911173s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 13.802369408s ago: executing program 2 (id=865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0), 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xc3}) 12.603658925s ago: executing program 3 (id=291): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvlan1\x00'}, 0x18) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYRES16=r1], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.504400241s ago: executing program 1 (id=1625): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_EXT_MASK={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 2.349012552s ago: executing program 1 (id=1627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40db33ad45001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070003900028008000100", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r3, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4092, 0xffc, 0x0, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000d00)="bdbe9689f969c76102004754007066d1c53eed0107000000f83c96c8fe5eaa960800000003f2a53a46ac1704169c9d8ae22f155c4045728e93ac6746c02829e5935c81b5b61b74fff75401ecfdf9ce78ae6a8b8abbba1943ae22ce05030000000000000035d8949357fa45fdd4db49d7c54a2f9c2704e2edf6f1a17446e4e72c088c3817e5e6ef5b50512f68436db39841586f9fa329bd164a6bc463a36693519a790e068a0a74751db93d0ab0c031f901102de416092171ac08d40b13c5cbb3cbe8ade23cf0cfa3f2b75602f47df01dcde100"/225, 0xe1, 0x200048d0, &(0x7f0000000140)={0x11, 0x1b}, 0x14) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "030000000800000081ba356700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008051}, 0x80) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r10, 0x29, 0x1f, 0x0, &(0x7f0000000080)) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013122b0a000000000000000007000000", @ANYRES32=r13, @ANYBLOB="d0000000820a00000c001a800800048004000980"], 0x2c}}, 0x0) (async, rerun: 32) sendmmsg$inet(r10, &(0x7f0000000980)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="fc31bf1714653582a30177ba5b164d8ef3d69bced1ee2c48a2ff59256d07393d61bdadc0a8cfb7b4d59b68a03b771ebb07f041b053390b716460f4ae8d150076522eb9b8a35dde3ca982d64802427c57f397fe46a37ff04648c8258fe13a5346a02557e78a4c2d4837cefa1359deffaf7fa4e7ec", 0x74}], 0x1, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @rand_addr=0x64010101}}}], 0xa8}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000440)="7d6283b6e8bfc4197e490e2877cb61156cfc46a87a4dbaf7e3b5d4c2f9eb901622cabe29f12c153d0c99d3fd5a2295389a9e1284f6a49cefc5d70014336b2061f56f19620a92d77b544c067c8ae72e06c17fcf61603fe652f1f9f6d262add468a53d612ad7b9ef2bcd", 0x69}, {&(0x7f0000000300)="9e7146eaa9730c687eb65efa65e18e6d27c74d57a784", 0x16}, {&(0x7f00000004c0)="ee51bed714ed0887249831d2344673a3ae4f2237aed9eac44b847b16f975c312a6a5afd2f8ea36ec5e5b97c40fe592401180f37f967ce0191972", 0x3a}, {&(0x7f0000000500)="d42e3206aba70e8b5112c061fa4bead0a2b6d1b8499e5bb64da67eaf6226af7ca243478172db42acc7655d2d0d1952141c286387ebdeeb51a0826299a1ded803e84c1a107bfa6bc711e79b7f5494baea245ed375259e4e944d5c7f299aa8a1c962cd7c46ca2943171c9e5cbe33", 0x6d}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000ac0)="9277c4ba0c1ee723b35a967a4a0be6aaf3c74125f8ac169113fed067ed80db97e02a3a6ab7f868cf3f279da3e8af7d7dd8216a97f734fa3866385229f332f004a45a00a8b342099531d1bdd4b498f385b230791f70814ed61af1b33864d9bc549745e1d95d7b43774dee62be06d004578eda11b7fa889b91c13045eb3aad93a1b0710f69d36caf61dbc3223250eb7b04dbbcc08e1c46ec3da755c5751b9ee14d953234ee60667dc7f8aa25aaf1fcd1828694108ab9", 0xb5}], 0x7}}, {{&(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000580)="6e2dced45d7106f1790d9be4266a0e16debce3f8dc9a2795e120e9552e16d07671249739d1c04987ee57450a0a655f33018440a294884d7ba3f1da10addbd91b669b7508e9ad77450cdcf4c632a19651ee24e4", 0x53}, {&(0x7f0000000700)="c6b195c48fa70709952761c37bc117ad17262bab5208", 0x16}, {&(0x7f0000000740)="c092041965f5024fc587bf5003b5afe054e3d0a198072fa28b2bd12da2176294bba2ede8dc0495f496a970de1e61e7e240d7e78baf3514eb6d284bf687a51f33f51958d54631f56775d5012dd5cafe4272de803a2a0bf509c9967a0ac5ba7c86fe923bd2d0d4694b54740c6613aedface183d17be173b47009c4192af4f76e6696478fc0de474c05e176fb055ea3de0130e1df2ed03f35531fdc3b7a2e8952689d795a8054ebaf6258651e713db148c750859b5bf3454b896a5ae55d626e24f697cb5ed8029f273d14fa864116ab8c6343598f703d775ef4", 0xd8}, {&(0x7f0000000840)="763c90975a6186bfbb31626afea859f8b96510314e611fd7d3d432862a8080e714963ae3b19ed664130d0bffa35a79b9dd003ebfadacc89d65837066203718145d65403647a6b2f7fc201fb11941d665af4813", 0x53}, {&(0x7f00000008c0)="7ecf47d28e7d800be7ca1d8da3aa5e860c2d3f97f2e33ab3", 0x18}], 0x5}}], 0x3, 0x44011) (async, rerun: 32) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$IP_VS_SO_GET_SERVICE(r14, 0x0, 0x483, 0x0, 0x0) 2.178302044s ago: executing program 1 (id=1629): socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000040), 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20010804) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}], 0x3}, 0x5}], 0x1, 0x100, 0x0) 1.760355212s ago: executing program 0 (id=1634): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x61, &(0x7f00000001c0)=""/97, 0x41000, 0x40, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0x7fffffff, 0x56}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x2, 0xb, 0x2}, {0x0, 0x3, 0x6, 0xb}], 0x10, 0x8, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@fallback=r0, r0, 0x1a, 0x10, 0x0, @void, @value=r1}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x20, 'MARK\x00', 0x2, {0x0, 0x35}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3ff825ec284a", @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0x5}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 1.680573185s ago: executing program 0 (id=1635): socket$unix(0x1, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x1a0, 0x1403, 0x1, 0x70bd2c, 0x25dddbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x24005014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffb}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x1a0, 0x1403, 0x1, 0x70bd2c, 0x25dddbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x24005014) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffb}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) (async) 1.655413047s ago: executing program 4 (id=1636): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r4, 0x53a}], 0x1, 0x4c58e922) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r5, 0x80000001, 0x0) (async) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) (async) listen(r9, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0xfffffff9}, 0x8) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) (async) close(0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 1.460396234s ago: executing program 4 (id=1637): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x40, 0x81, 0x5}, 0x6f) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x7, 0x66, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x19, 0x1, 0xe, [{@multicast1, 0x4000088}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x842}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}]}, @ssrr={0x89, 0x17, 0xbd, [@local, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, @timestamp_prespec={0x44, 0x4, 0xfb}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000300)=0xd, 0x4) 1.423258468s ago: executing program 0 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x1, {0x2, 0x18, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) 1.328434156s ago: executing program 4 (id=1639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4890}, 0x40000001) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 1.195947619s ago: executing program 4 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x4c, r3, 0x801, 0x0, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000140)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000001840), &(0x7f0000000200)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x8, 0x3}, {0xfff3, 0xffff}, {0xf, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff6}]}, 0x2c}}, 0x20044000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000400001c0012800b000100697036746e6c00000c0002800500060004003d5c7c617ce9a40000377fbe14d3beaa2ec9b4e8365ed68f979dbb3c90a1275551ea13277d144ac9a252cb9b0c8e17667571bbdf21e2191a5cb431d4f8ffc32d806deb1c61980c166d38c1c1e5321469858e449a6766903a760ceeb2a248263e69f8493f7c5c8619a341e2379784508298901b1b956e9aef61c4c11ece3c52326ab3efe78dd0d459853688fe3fe5f748f3aa08b83e1ebe3afb49bc2a092573175b2aaaae7bd24e42b096606b5f128a434d2c702e847d53ae37042bed9a950a69f00000000000"], 0x3c}}, 0x4048045) 1.195380158s ago: executing program 0 (id=1641): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2c, 0x3, 0x40) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.189117798s ago: executing program 1 (id=1642): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r9, 0xfffffffa}, 0x8) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r5, &(0x7f0000000800), 0x0}, 0x20) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) recvmsg(r0, &(0x7f0000001100)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000001000)=""/70, 0x46}], 0x4, &(0x7f0000001080)=""/112, 0x70}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 941.668963ms ago: executing program 0 (id=1643): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000f9af65d76a23a876c200060000100000001900100100000000670600"], 0x20}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r4) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) sendto$inet6(r3, &(0x7f0000000180)="b1607f2dde8bea4b1b38efe4686599a1d0fa405a71ec468fffa4152bd9b0d55a1394fc2317978905f55dc60b5187e98b0b1481e2d9a30e002a8a090f9ea1ab85866c4f4516a48f1b82b952169093612f379a3f97bb289e45955db79619fdadeb93e2ca9f0509db42c73fe8b48aaa20f9dccacf2e86c02032f1dad31e797960e59b09341ca30fc09100f62d8a8a3549cb1633ace50b73699ba18d12410750b2dd40c0c301c70f1495f5a0a41c5bd615bf58c5bf2cfd790546a73b2fbf1af4454d91fb13008b4ac6e2f2453d54", 0xcc, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x1db6, 0x3, 0x6, 0x2, 0x362, 0x5, 0xaa6, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x668, 0xe1, 0x6, 0x3, 0x40}}, &(0x7f0000000380)=0xb0) 855.780723ms ago: executing program 4 (id=1644): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 712.459825ms ago: executing program 1 (id=1645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, 0xfffffffffffffffd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000010000104000000000400000000000000", @ANYRESHEX=r0, @ANYBLOB="0040000000000000440012800b00010065727370616e0000340002800400120004001200050009002000000008001500c73607000800140001000100080007007f"], 0x6c}}, 0x0) 711.275527ms ago: executing program 4 (id=1646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r0, &(0x7f0000000c80)=""/204, 0xcc, 0x40002000, &(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$can_raw(0x1d, 0x3, 0x1) recvfrom$unix(r0, &(0x7f0000000580)=""/232, 0xe8, 0x40002000, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x3e0, 0x1b0, 0x0, 0xd0, 0x3e0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x73}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [0x0, 0xff000000], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00', {0xff}}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_buf(r4, 0x0, 0x23, 0x0, &(0x7f0000000200)) close(r4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x1e0, 0xffffffff, 0x2d0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@private1, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @icmp_id}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@empty, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 613.025094ms ago: executing program 1 (id=1647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x800) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "468762c6748b75e2", "f9a8e642a176db142cba8326f94d755db092448e05109b06a6edf731309396c6", "0cc22058", "91188411d23079a1"}, 0x38) 0s ago: executing program 0 (id=1648): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@loopback, r2}, 0x14) sendto$inet6(r1, &(0x7f0000000400)="800034ca269bb23c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000000) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x9, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) connect$bt_sco(r5, &(0x7f0000000100)={0x1f, @none}, 0x8) kernel console output (not intermixed with test programs): active [ 218.186348][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 218.206296][ T9519] chnl_net:caif_netlink_parms(): no params data found [ 218.263711][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.378286][ T9606] sctp: [Deprecated]: syz.0.998 (pid 9606) Use of int in maxseg socket option. [ 218.378286][ T9606] Use struct sctp_assoc_value instead [ 218.413510][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.514698][ T9482] hsr_slave_0: entered promiscuous mode [ 218.522868][ T9482] hsr_slave_1: entered promiscuous mode [ 218.635785][ T9620] netlink: 'syz.4.1003': attribute type 2 has an invalid length. [ 218.653009][ T9620] netlink: 'syz.4.1003': attribute type 8 has an invalid length. [ 218.662403][ T9620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1003'. [ 218.726592][ T9620] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 218.795025][ T5840] Bluetooth: hci2: command tx timeout [ 218.818442][ T9519] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.825733][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.838869][ T9519] bridge_slave_0: entered allmulticast mode [ 218.847984][ T9519] bridge_slave_0: entered promiscuous mode [ 218.866956][ T5840] Bluetooth: hci1: command tx timeout [ 218.870718][ T9625] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.884815][ T9626] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 218.895295][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 218.918518][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.931499][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.939951][ T9519] bridge_slave_1: entered allmulticast mode [ 218.963424][ T9519] bridge_slave_1: entered promiscuous mode [ 219.098763][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1005'. [ 219.198539][ T53] bridge_slave_1: left allmulticast mode [ 219.204747][ T53] bridge_slave_1: left promiscuous mode [ 219.214051][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.224444][ T53] bridge_slave_0: left allmulticast mode [ 219.230795][ T53] bridge_slave_0: left promiscuous mode [ 219.236649][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.296197][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 219.473507][ T9648] IPVS: length: 8 != 1152 [ 219.623409][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.635002][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.646198][ T53] bond0 (unregistering): Released all slaves [ 219.664384][ T9519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.725031][ T9644] netlink: 'syz.1.1006': attribute type 21 has an invalid length. [ 219.756793][ T9644] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.786098][ T9519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.894141][ T9519] team0: Port device team_slave_0 added [ 219.973636][ T9519] team0: Port device team_slave_1 added [ 220.051319][ T9658] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 220.178172][ T9658] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.189331][ T9663] sctp: [Deprecated]: syz.4.1015 (pid 9663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.189331][ T9663] Use struct sctp_sack_info instead [ 220.321582][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.331851][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.332533][ T9667] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 220.361201][ T9519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.429828][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.437794][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.472180][ T9519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.524324][ T53] hsr_slave_0: left promiscuous mode [ 220.532035][ T53] hsr_slave_1: left promiscuous mode [ 220.548905][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.556381][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.578419][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.586047][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.625517][ T53] veth1_macvtap: left promiscuous mode [ 220.631270][ T53] veth0_macvtap: left promiscuous mode [ 220.647190][ T53] veth1_vlan: left promiscuous mode [ 220.657014][ T53] veth0_vlan: left promiscuous mode [ 220.867024][ T5840] Bluetooth: hci2: command tx timeout [ 220.946934][ T5840] Bluetooth: hci1: command tx timeout [ 221.261605][ T53] team0 (unregistering): Port device team_slave_1 removed [ 221.304321][ T53] team0 (unregistering): Port device team_slave_0 removed [ 221.898073][ T9519] hsr_slave_0: entered promiscuous mode [ 221.898116][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1020'. [ 221.908649][ T9519] hsr_slave_1: entered promiscuous mode [ 221.922758][ T9519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.939853][ T9519] Cannot create hsr debugfs directory [ 222.057112][ T9689] netlink: 'syz.4.1022': attribute type 30 has an invalid length. [ 222.105294][ T9689] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.114864][ T9689] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.124000][ T9689] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.133052][ T9689] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.145726][ T9689] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.154754][ T9689] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.163879][ T9689] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.173202][ T9689] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.296791][ T9482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.352944][ T9695] netlink: 'syz.1.1024': attribute type 7 has an invalid length. [ 222.383595][ T9482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.468909][ T9482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.520937][ T9482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.562064][ T9699] netlink: 'syz.1.1025': attribute type 7 has an invalid length. [ 222.763304][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 222.917514][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.948018][ T5840] Bluetooth: hci2: command tx timeout [ 222.981637][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.996253][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.003507][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.018877][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 223.070184][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.077455][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.198605][ T9726] sctp: [Deprecated]: syz.4.1033 (pid 9726) Use of int in maxseg socket option. [ 223.198605][ T9726] Use struct sctp_assoc_value instead [ 223.235261][ T9482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.328615][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 223.363329][ T9519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.405782][ T9519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.487871][ T9519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.525446][ T9519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.711336][ T9746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1036'. [ 223.730405][ T9740] xt_CT: No such helper "pptp" [ 223.743615][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.840947][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.914149][ T9519] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.932646][ T9482] veth0_vlan: entered promiscuous mode [ 223.951917][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.959171][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.972371][ T9752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 223.998766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.005987][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.026115][ T9482] veth1_vlan: entered promiscuous mode [ 224.029175][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 224.135943][ T9482] veth0_macvtap: entered promiscuous mode [ 224.149089][ T9482] veth1_macvtap: entered promiscuous mode [ 224.332381][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.359281][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.373611][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.384853][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.400883][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.474610][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.491402][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.502094][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.504793][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 224.514034][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.539455][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.735743][ T9482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.752468][ T9482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.762432][ T9482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.773161][ T9482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.786530][ T9769] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 224.801890][ T9769] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 224.952639][ T9519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.292874][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.309380][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.487189][ T9788] sctp: [Deprecated]: syz.4.1049 (pid 9788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.487189][ T9788] Use struct sctp_sack_info instead [ 225.487800][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.514995][ T9519] veth0_vlan: entered promiscuous mode [ 225.551350][ T9519] veth1_vlan: entered promiscuous mode [ 225.560731][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.771863][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 225.789356][ T9519] veth0_macvtap: entered promiscuous mode [ 225.828291][ T9519] veth1_macvtap: entered promiscuous mode [ 226.397169][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.408352][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 226.420127][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.436258][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.463509][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.475173][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 226.485170][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.497225][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.505584][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 226.509895][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.542034][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.570650][ T9818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.580787][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.595432][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.606412][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.625898][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.653487][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.665444][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.777888][ T9519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.800992][ T9519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.824417][ T9519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.864758][ T9519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.397847][ T4515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.482372][ T7591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.532339][ T7591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.632640][ T9841] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1065'. [ 227.783329][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.787236][ T4515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.807253][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.815636][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.819870][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.836042][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.849254][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.863131][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.996105][ T4515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.052010][ T9847] netlink: 'syz.1.1066': attribute type 2 has an invalid length. [ 228.075023][ T9848] netlink: 'syz.1.1066': attribute type 3 has an invalid length. [ 228.297539][ T4515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.806114][ T4515] bridge_slave_1: left allmulticast mode [ 228.812635][ T4515] bridge_slave_1: left promiscuous mode [ 228.818819][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.832485][ T4515] bridge_slave_0: left allmulticast mode [ 228.839055][ T4515] bridge_slave_0: left promiscuous mode [ 228.845196][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.202084][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.213203][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.224112][ T4515] bond0 (unregistering): Released all slaves [ 229.346333][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 229.511691][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.520757][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.529431][ T9843] bridge_slave_0: entered allmulticast mode [ 229.537509][ T9843] bridge_slave_0: entered promiscuous mode [ 229.548349][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.555585][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.563273][ T9843] bridge_slave_1: entered allmulticast mode [ 229.571381][ T9843] bridge_slave_1: entered promiscuous mode [ 229.612840][ T4515] hsr_slave_0: left promiscuous mode [ 229.622502][ T4515] hsr_slave_1: left promiscuous mode [ 229.630172][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.638245][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.646496][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.655990][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.675105][ T4515] veth1_macvtap: left promiscuous mode [ 229.683548][ T4515] veth0_macvtap: left promiscuous mode [ 229.689647][ T4515] veth1_vlan: left promiscuous mode [ 229.695292][ T4515] veth0_vlan: left promiscuous mode [ 229.907688][ T5840] Bluetooth: hci1: command tx timeout [ 230.216111][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.232949][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.242241][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.264873][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.273368][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.462287][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 230.508975][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 230.963206][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.984832][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.994533][ T9886] tipc: Enabling of bearer rejected, failed to enable media [ 231.286230][ T9843] team0: Port device team_slave_0 added [ 231.358534][ T9843] team0: Port device team_slave_1 added [ 231.672437][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.686502][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.722841][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.750012][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.762541][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.872146][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.987378][ T5141] Bluetooth: hci1: command tx timeout [ 232.229763][ T9843] hsr_slave_0: entered promiscuous mode [ 232.254764][ T9843] hsr_slave_1: entered promiscuous mode [ 232.307715][ T5141] Bluetooth: hci2: command tx timeout [ 232.862389][ T9931] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 232.871633][ T9931] macsec1: entered allmulticast mode [ 232.896903][ T9931] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 232.985176][ T9931] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 233.008547][ T9931] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 233.260642][ T9894] chnl_net:caif_netlink_parms(): no params data found [ 233.274091][ T9936] netdevsim netdevsim1 : renamed from netdevsim0 [ 233.402464][ T4515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.599960][ T9952] __nla_validate_parse: 1 callbacks suppressed [ 233.599982][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 233.641757][ T4515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.804655][ T4515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.822538][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.835860][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.846613][ T9894] bridge_slave_0: entered allmulticast mode [ 233.860521][ T9894] bridge_slave_0: entered promiscuous mode [ 233.869715][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.877571][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.884908][ T9894] bridge_slave_1: entered allmulticast mode [ 233.894941][ T9894] bridge_slave_1: entered promiscuous mode [ 233.952241][ T4515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.984041][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803137d800: rx timeout, send abort [ 233.993870][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803137e000: rx timeout, send abort [ 234.002538][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803137d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.018277][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803137e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.066985][ T5141] Bluetooth: hci1: command tx timeout [ 234.185575][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.241980][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.383755][ T9894] team0: Port device team_slave_0 added [ 234.390094][ T5141] Bluetooth: hci2: command tx timeout [ 234.485004][ T9894] team0: Port device team_slave_1 added [ 234.630379][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.641096][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.678234][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.691516][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.699599][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.726522][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.753760][ T9986] geneve2: entered promiscuous mode [ 234.760964][ T9986] geneve2: entered allmulticast mode [ 234.806089][ T4515] bridge_slave_1: left allmulticast mode [ 234.822886][ T4515] bridge_slave_1: left promiscuous mode [ 234.829550][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.840122][ T4515] bridge_slave_0: left allmulticast mode [ 234.845909][ T4515] bridge_slave_0: left promiscuous mode [ 234.853213][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.226923][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.244248][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.261768][ T4515] bond0 (unregistering): Released all slaves [ 235.636583][ T9843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.672847][ T9843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.709817][T10022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1108'. [ 235.732420][ T9894] hsr_slave_0: entered promiscuous mode [ 235.748675][ T9894] hsr_slave_1: entered promiscuous mode [ 235.760731][ T9894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.770532][ T9894] Cannot create hsr debugfs directory [ 235.776180][ T9843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.893904][ T9843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.986774][ T4515] hsr_slave_0: left promiscuous mode [ 235.993039][ T4515] hsr_slave_1: left promiscuous mode [ 236.004956][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.014040][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.048889][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.060515][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.069264][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'. [ 236.093028][ T4515] veth1_macvtap: left promiscuous mode [ 236.098790][ T4515] veth0_macvtap: left promiscuous mode [ 236.104576][ T4515] veth1_vlan: left promiscuous mode [ 236.110087][ T4515] veth0_vlan: left promiscuous mode [ 236.147573][ T5141] Bluetooth: hci1: command tx timeout [ 236.475208][ T5141] Bluetooth: hci2: command tx timeout [ 236.790296][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 236.835659][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 237.511240][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 237.542480][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 237.558896][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 237.833147][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.892241][T10079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'. [ 237.909154][T10077] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1120'. [ 237.992947][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.065729][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.072998][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.117907][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.125330][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.360700][ T9894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.392634][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 238.428823][T10102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1128'. [ 238.470369][ T9894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.490992][ T9894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.526183][ T9894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.547275][ T5141] Bluetooth: hci2: command tx timeout [ 238.711121][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1131'. [ 238.793101][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.809238][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.845686][T10121] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1133'. [ 238.914509][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.953111][ T9843] veth0_vlan: entered promiscuous mode [ 238.971907][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.979160][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.023645][ T9843] veth1_vlan: entered promiscuous mode [ 239.044146][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.051420][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.156493][ T9843] veth0_macvtap: entered promiscuous mode [ 239.191664][ T9843] veth1_macvtap: entered promiscuous mode [ 239.242320][T10134] veth0_to_bridge: entered promiscuous mode [ 239.299529][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.337591][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.373421][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.396172][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.432926][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.458300][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.517958][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.556384][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.583283][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.601830][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.613454][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.664467][ T9843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.692111][ T9843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.733527][ T9843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.750300][ T9843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.804614][T10156] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 239.826264][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.952072][T10161] sch_fq: defrate 0 ignored. [ 239.987835][T10161] sch_fq: defrate 0 ignored. [ 239.997891][T10161] sch_fq: defrate 0 ignored. [ 240.012340][T10161] sch_fq: defrate 0 ignored. [ 240.026858][T10164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1147'. [ 240.044322][T10161] sch_fq: defrate 0 ignored. [ 240.051694][T10161] sch_fq: defrate 0 ignored. [ 240.062964][T10161] sch_fq: defrate 0 ignored. [ 240.070357][T10161] sch_fq: defrate 0 ignored. [ 240.075854][T10161] sch_fq: defrate 0 ignored. [ 240.095110][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1147'. [ 240.111358][T10161] sch_fq: defrate 0 ignored. [ 240.121322][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 240.162427][T10164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1147'. [ 240.196421][T10164] bridge_slave_0: left allmulticast mode [ 240.237851][T10164] bridge_slave_0: left promiscuous mode [ 240.261693][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.289225][T10164] bridge_slave_1: left allmulticast mode [ 240.295085][T10164] bridge_slave_1: left promiscuous mode [ 240.301635][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.326423][T10164] bond0: (slave bond_slave_0): Releasing backup interface [ 240.362615][T10164] bond0: (slave bond_slave_1): Releasing backup interface [ 240.412817][T10164] team0: Port device team_slave_0 removed [ 240.455468][T10164] team0: Port device team_slave_1 removed [ 240.480219][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.499445][T10164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.512726][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.524318][T10164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.560518][T10164] bond4: (slave gretap1): Releasing active interface [ 240.593410][T10164] batman_adv: batadv0: Removing interface: gretap2 [ 240.687843][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.695885][T10172] x_tables: duplicate underflow at hook 2 [ 240.707139][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.803702][ T9894] veth0_vlan: entered promiscuous mode [ 240.882065][T10169] syzkaller1: entered promiscuous mode [ 240.897257][T10169] syzkaller1: entered allmulticast mode [ 240.933879][ T9894] veth1_vlan: entered promiscuous mode [ 240.949799][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.976149][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.080039][ T9894] veth0_macvtap: entered promiscuous mode [ 241.096604][ T9894] veth1_macvtap: entered promiscuous mode [ 241.436544][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.455743][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.466236][T10193] x_tables: duplicate underflow at hook 2 [ 241.477803][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.509953][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.538467][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.605514][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.624321][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.641154][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.642340][T10197] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 241.652395][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.674813][T10199] nbd: must specify at least one socket [ 241.679771][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.702454][ T9894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.716191][ T9894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.742793][ T9894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.752505][ T9894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.887686][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 241.909366][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 241.974364][ T1151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.997539][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.021281][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.092912][ T1151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.125115][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.133959][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.190097][ T1151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.325171][ T1151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.512114][ T1151] bridge_slave_1: left allmulticast mode [ 242.518501][ T1151] bridge_slave_1: left promiscuous mode [ 242.524393][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.542276][ T1151] bridge_slave_0: left allmulticast mode [ 242.548573][ T1151] bridge_slave_0: left promiscuous mode [ 242.554429][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.739994][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 243.091632][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.105903][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.122250][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.132229][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.144401][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.254694][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.266199][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.276617][ T1151] bond0 (unregistering): Released all slaves [ 243.626278][ T1151] hsr_slave_0: left promiscuous mode [ 243.633274][ T1151] hsr_slave_1: left promiscuous mode [ 243.643752][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.653693][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.663108][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.670722][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.692746][ T1151] veth1_macvtap: left promiscuous mode [ 243.698842][ T1151] veth0_macvtap: left promiscuous mode [ 243.704463][ T1151] veth1_vlan: left promiscuous mode [ 243.710514][ T1151] veth0_vlan: left promiscuous mode [ 244.143020][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 244.188426][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 244.742813][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 244.774332][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.784981][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 244.798101][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.812044][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.826524][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.844238][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.152909][T10212] chnl_net:caif_netlink_parms(): no params data found [ 245.187098][ T5840] Bluetooth: hci1: command tx timeout [ 245.269599][T10244] xt_CT: No such helper "pptp" [ 245.448966][T10256] No such timeout policy "syz0" [ 245.452228][T10250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'. [ 245.666505][T10267] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.696606][T10266] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.707472][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'. [ 245.783299][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.792845][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.800739][T10212] bridge_slave_0: entered allmulticast mode [ 245.814500][T10212] bridge_slave_0: entered promiscuous mode [ 245.866555][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.888327][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.927345][T10212] bridge_slave_1: entered allmulticast mode [ 245.933974][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 245.935376][T10212] bridge_slave_1: entered promiscuous mode [ 245.989652][T10281] netlink: 'syz.0.1178': attribute type 11 has an invalid length. [ 246.012365][T10281] netlink: 'syz.0.1178': attribute type 11 has an invalid length. [ 246.054048][T10281] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 246.095375][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.110937][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.295681][T10212] team0: Port device team_slave_0 added [ 246.336638][T10238] chnl_net:caif_netlink_parms(): no params data found [ 246.345953][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 246.372854][T10212] team0: Port device team_slave_1 added [ 246.871072][ T5141] Bluetooth: hci2: command tx timeout [ 246.924677][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.999942][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.012891][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.039865][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.053074][T10307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1184'. [ 247.107707][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.150508][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.172730][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.200542][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.267581][ T5141] Bluetooth: hci1: command tx timeout [ 247.302782][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 247.314772][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.562111][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.579682][T10326] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1187'. [ 247.617080][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 247.788180][T10340] x_tables: duplicate underflow at hook 2 [ 248.947062][ T5840] Bluetooth: hci2: command tx timeout [ 249.285039][T10212] hsr_slave_0: entered promiscuous mode [ 249.294723][T10212] hsr_slave_1: entered promiscuous mode [ 249.347023][ T5840] Bluetooth: hci1: command tx timeout [ 249.385044][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.408941][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.416250][T10238] bridge_slave_0: entered allmulticast mode [ 249.468787][T10238] bridge_slave_0: entered promiscuous mode [ 249.552683][T10349] gtp0: entered promiscuous mode [ 249.558244][T10349] gtp0: entered allmulticast mode [ 249.567792][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.585285][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.598201][T10238] bridge_slave_1: entered allmulticast mode [ 249.607995][T10238] bridge_slave_1: entered promiscuous mode [ 249.814665][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.878451][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.000152][T10363] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 250.017579][T10363] __nla_validate_parse: 2 callbacks suppressed [ 250.017599][T10363] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1197'. [ 250.174979][T10238] team0: Port device team_slave_0 added [ 250.252561][T10238] team0: Port device team_slave_1 added [ 250.338551][ T1151] bridge_slave_1: left allmulticast mode [ 250.345758][ T1151] bridge_slave_1: left promiscuous mode [ 250.352777][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.363051][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 250.382143][T10387] netlink: 'syz.4.1204': attribute type 7 has an invalid length. [ 250.392580][ T1151] bridge_slave_0: left allmulticast mode [ 250.397851][T10387] netlink: 'syz.4.1204': attribute type 8 has an invalid length. [ 250.402453][ T1151] bridge_slave_0: left promiscuous mode [ 250.427308][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.444800][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 250.854888][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.866240][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.882494][ T1151] bond0 (unregistering): Released all slaves [ 250.967102][T10387] erspan0: entered promiscuous mode [ 250.975934][T10387] erspan0: left promiscuous mode [ 251.013269][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.020854][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.026942][ T5840] Bluetooth: hci2: command tx timeout [ 251.054103][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.072325][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.079945][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.119206][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.197717][T10400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.351157][T10238] hsr_slave_0: entered promiscuous mode [ 251.413300][T10238] hsr_slave_1: entered promiscuous mode [ 251.422783][T10238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.434312][ T5840] Bluetooth: hci1: command tx timeout [ 251.437077][T10238] Cannot create hsr debugfs directory [ 251.463552][T10405] veth1_to_hsr: entered promiscuous mode [ 251.515418][ T1151] hsr_slave_0: left promiscuous mode [ 251.540348][ T1151] hsr_slave_1: left promiscuous mode [ 251.546317][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.570194][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.589747][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.602017][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.645324][ T1151] veth1_macvtap: left promiscuous mode [ 251.653150][ T1151] veth0_macvtap: left promiscuous mode [ 251.663501][ T1151] veth1_vlan: left promiscuous mode [ 251.674772][ T1151] veth0_vlan: left promiscuous mode [ 251.827173][T10414] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1212'. [ 251.836612][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1212'. [ 252.224831][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 252.268665][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 252.698822][T10407] veth1_to_hsr: left promiscuous mode [ 252.823423][T10419] netlink: 'syz.0.1213': attribute type 13 has an invalid length. [ 252.863392][T10419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 252.913702][T10419] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 253.108583][ T5840] Bluetooth: hci2: command tx timeout [ 253.303643][T10212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.359849][T10212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.381164][T10212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.398645][T10212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.670436][T10448] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 253.947480][T10212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.082446][T10212] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.175633][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.182889][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.195762][T10473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1230'. [ 254.208629][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.215856][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.225694][T10238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.284649][T10238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.324747][T10238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.382331][T10238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.611949][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 254.690115][T10489] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 254.812268][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.905047][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.975048][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.982338][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.175955][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.183218][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.273514][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.387421][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 255.418734][T10212] veth0_vlan: entered promiscuous mode [ 255.454189][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 255.469889][T10212] veth1_vlan: entered promiscuous mode [ 255.665576][T10212] veth0_macvtap: entered promiscuous mode [ 255.695235][T10212] veth1_macvtap: entered promiscuous mode [ 255.760771][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.769022][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.781331][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.817685][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.852597][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.886153][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.904741][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.957175][T10212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.966630][T10212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.987455][T10212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.996219][T10212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.046259][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.112717][T10540] xt_l2tp: v2 doesn't support IP mode [ 256.310052][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.325099][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.350774][T10238] veth0_vlan: entered promiscuous mode [ 256.411956][T10238] veth1_vlan: entered promiscuous mode [ 256.464511][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.475602][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.592269][T10238] veth0_macvtap: entered promiscuous mode [ 256.641458][T10238] veth1_macvtap: entered promiscuous mode [ 256.689216][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.701976][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.713792][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.724711][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.743649][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.754895][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.769125][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.779456][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.791051][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.804964][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.880252][T10238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.915804][T10575] nbd: couldn't find a device at index 8960 [ 256.917137][T10238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.942691][T10238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.959298][T10238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.159803][T10581] netlink: 'syz.4.1252': attribute type 10 has an invalid length. [ 257.175176][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1252'. [ 257.260720][ T1151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.463242][T10581] team0: Port device geneve0 added [ 257.486484][T10586] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 257.541761][ T1151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.635303][ T7591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.653626][ T7591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.665356][ T1151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.762242][ T1151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.796173][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.806363][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.033824][ T1151] bridge_slave_1: left allmulticast mode [ 258.040124][ T1151] bridge_slave_1: left promiscuous mode [ 258.045890][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.061268][ T1151] bridge_slave_0: left allmulticast mode [ 258.068418][ T1151] bridge_slave_0: left promiscuous mode [ 258.074164][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.174279][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 258.684628][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.696978][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.713101][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.736394][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.762449][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.844054][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.859086][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.870460][ T1151] bond0 (unregistering): Released all slaves [ 258.923945][T10596] team0: Port device bond0 removed [ 258.936022][T10596] bridge_slave_0: left allmulticast mode [ 258.942512][T10596] bridge_slave_0: left promiscuous mode [ 258.952636][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.981740][T10596] bridge_slave_1: left allmulticast mode [ 258.988933][T10596] bridge_slave_1: left promiscuous mode [ 258.995466][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.014350][T10596] bond0: (slave bond_slave_0): Releasing backup interface [ 259.032422][T10596] bond0: (slave bond_slave_1): Releasing backup interface [ 259.056007][T10596] team0: Failed to send options change via netlink (err -105) [ 259.079968][T10596] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 259.092010][T10596] team0: Port device team_slave_0 removed [ 259.109991][T10596] team0: Failed to send options change via netlink (err -105) [ 259.126566][T10596] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 259.136632][T10596] team0: Port device team_slave_1 removed [ 259.143307][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.151163][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.160163][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.168207][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.201324][T10596] team0: Failed to send options change via netlink (err -105) [ 259.214608][T10596] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 259.225082][T10596] team0: Port device geneve0 removed [ 259.233511][T10596] bond0: (slave wlan1): Releasing backup interface [ 259.255769][T10596] bond0: (slave macvlan2): Releasing backup interface [ 259.265911][T10596] batadv0: left promiscuous mode [ 259.525154][ T1151] hsr_slave_0: left promiscuous mode [ 259.531377][ T1151] hsr_slave_1: left promiscuous mode [ 259.540922][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.549092][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.562470][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.570096][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.593425][ T1151] veth1_macvtap: left promiscuous mode [ 259.599885][ T1151] veth0_macvtap: left promiscuous mode [ 259.605505][ T1151] veth1_vlan: left promiscuous mode [ 259.611393][ T1151] veth0_vlan: left promiscuous mode [ 260.101372][T10619] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1261'. [ 260.312448][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 260.373100][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.382568][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.395509][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.400275][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 260.415287][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.433655][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.868745][ T5141] Bluetooth: hci1: command tx timeout [ 261.002012][T10626] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 261.027855][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.254812][T10606] chnl_net:caif_netlink_parms(): no params data found [ 261.274997][T10639] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 261.375070][T10641] x_tables: duplicate underflow at hook 1 [ 261.431365][T10643] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 261.476007][ T53] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 261.478171][T10639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.607074][ T62] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 261.691578][T10659] openvswitch: netlink: EtherType 50a is less than min 600 [ 261.777942][T10659] openvswitch: netlink: EtherType 50a is less than min 600 [ 261.954840][T10606] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.964063][T10606] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.972230][T10606] bridge_slave_0: entered allmulticast mode [ 261.980460][T10606] bridge_slave_0: entered promiscuous mode [ 262.059291][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.093964][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.102946][T10606] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.112718][T10606] bridge_slave_1: entered allmulticast mode [ 262.126728][T10606] bridge_slave_1: entered promiscuous mode [ 262.134168][T10623] chnl_net:caif_netlink_parms(): no params data found [ 262.228631][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.285562][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 262.294970][T10680] openvswitch: netlink: nsh attribute has 16382 unknown bytes. [ 262.303238][T10680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.313575][T10606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.358979][T10606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.418502][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.484512][T10606] team0: Port device team_slave_0 added [ 262.531955][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.547739][ T5141] Bluetooth: hci2: command tx timeout [ 262.558927][T10606] team0: Port device team_slave_1 added [ 262.630890][T10606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.662822][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.729033][T10606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.740820][T10623] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.750350][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.758531][T10623] bridge_slave_0: entered allmulticast mode [ 262.769885][T10623] bridge_slave_0: entered promiscuous mode [ 262.785717][T10606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.795953][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.833597][T10606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.904580][T10623] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.919694][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.934472][T10623] bridge_slave_1: entered allmulticast mode [ 262.947656][ T5840] Bluetooth: hci1: command tx timeout [ 262.977072][T10623] bridge_slave_1: entered promiscuous mode [ 263.044119][T10702] nbd: must specify a device to reconfigure [ 263.173112][T10711] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1288'. [ 263.192754][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1288'. [ 263.208434][T10606] hsr_slave_0: entered promiscuous mode [ 263.215333][T10606] hsr_slave_1: entered promiscuous mode [ 263.237165][T10623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.305447][T10623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.523580][T10720] tipc: Started in network mode [ 263.529995][T10720] tipc: Node identity ac1414aa, cluster identity 4711 [ 263.558804][T10720] tipc: Enabled bearer , priority 10 [ 263.581870][T10623] team0: Port device team_slave_0 added [ 263.595616][ T5916] hid-generic 0005:10CF:5540.0002: item fetching failed at offset 0/2 [ 263.626442][T10623] team0: Port device team_slave_1 added [ 263.645035][ T5916] hid-generic 0005:10CF:5540.0002: probe with driver hid-generic failed with error -22 [ 263.753244][T10623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.762673][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.795690][T10623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.826576][ T1151] bridge_slave_1: left allmulticast mode [ 263.835778][ T1151] bridge_slave_1: left promiscuous mode [ 263.845443][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.872087][ T1151] bridge_slave_0: left allmulticast mode [ 263.883862][ T1151] bridge_slave_0: left promiscuous mode [ 263.892607][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.917201][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 264.116622][T10742] netlink: 'syz.1.1296': attribute type 33 has an invalid length. [ 264.126949][T10742] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1296'. [ 264.189491][T10743] netlink: 'syz.1.1296': attribute type 21 has an invalid length. [ 264.244169][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 264.464477][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.477587][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.488567][ T1151] bond0 (unregistering): Released all slaves [ 264.503003][T10623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.511428][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.606785][T10623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.637036][ T5840] Bluetooth: hci2: command tx timeout [ 264.651162][T10743] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1296'. [ 264.689360][ T8999] tipc: Node number set to 2886997162 [ 264.950679][T10623] hsr_slave_0: entered promiscuous mode [ 264.980693][T10623] hsr_slave_1: entered promiscuous mode [ 264.991611][T10623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.036780][ T5840] Bluetooth: hci1: command tx timeout [ 265.050117][T10623] Cannot create hsr debugfs directory [ 265.322200][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1307'. [ 265.394601][ T1151] hsr_slave_0: left promiscuous mode [ 265.424048][ T1151] hsr_slave_1: left promiscuous mode [ 265.459648][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.467699][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.500271][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.508655][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.555838][ T1151] veth1_macvtap: left promiscuous mode [ 265.564367][ T1151] veth0_macvtap: left promiscuous mode [ 265.575194][ T1151] veth1_vlan: left promiscuous mode [ 265.585367][ T1151] veth0_vlan: left promiscuous mode [ 266.164498][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 266.212061][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 266.709465][T10778] veth1_macvtap: entered allmulticast mode [ 266.720732][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 267.107623][ T5141] Bluetooth: hci1: command tx timeout [ 267.968237][T10835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1326'. [ 267.978329][T10835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1326'. [ 268.105150][T10606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.140246][T10606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.176445][T10606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.211978][T10606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.239330][ T1215] hid-generic 0005:0B57:0009.0003: collection stack underflow [ 268.261737][ T1215] hid-generic 0005:0B57:0009.0003: item 0 0 0 12 parsing failed [ 268.277865][ T1215] hid-generic 0005:0B57:0009.0003: probe with driver hid-generic failed with error -22 [ 268.372966][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 268.431477][T10623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.787299][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 268.893933][T10623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.912657][T10623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.038305][T10623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.313112][T10606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.411901][T10606] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.462638][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.469884][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.514954][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.522201][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.553775][T10623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.629546][T10891] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1340'. [ 269.658754][T10891] openvswitch: netlink: Flow key attr not present in new flow. [ 269.696147][T10623] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.781161][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.788577][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.822496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.829736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.939188][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.956267][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 269.974241][T10901] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 269.985040][T10901] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 270.009581][T10901] netlink: 'syz.0.1342': attribute type 21 has an invalid length. [ 270.044858][T10901] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 270.155504][T10606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.279625][T10606] veth0_vlan: entered promiscuous mode [ 270.361585][T10606] veth1_vlan: entered promiscuous mode [ 270.518817][T10606] veth0_macvtap: entered promiscuous mode [ 270.530606][T10623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.569006][T10606] veth1_macvtap: entered promiscuous mode [ 270.632890][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 270.664179][T10606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.744510][T10606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.813691][T10606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.828586][T10606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.850119][T10606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.867061][ T5141] Bluetooth: hci2: command 0x040f tx timeout [ 270.869573][T10606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.174883][T10929] bond0 (unregistering): Released all slaves [ 271.397115][T10623] veth0_vlan: entered promiscuous mode [ 271.530974][T10956] openvswitch: netlink: Missing valid actions attribute. [ 271.556947][T10956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.569323][T10623] veth1_vlan: entered promiscuous mode [ 271.587324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.602679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.765359][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.795477][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.814256][T10623] veth0_macvtap: entered promiscuous mode [ 271.860704][T10623] veth1_macvtap: entered promiscuous mode [ 271.968699][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.007042][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.038370][T10623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.070318][T10623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.117328][T10623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.142147][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 272.171039][T10623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.194048][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 272.207225][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 272.230801][T10623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.255408][T10623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.277236][T10623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.289081][T10623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.305440][T10983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1364'. [ 272.440293][T10988] openvswitch: netlink: Flow actions attr not present in new flow. [ 272.660227][ T1151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.728778][T10996] sctp: [Deprecated]: syz.1.1369 (pid 10996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.728778][T10996] Use struct sctp_sack_info instead [ 272.749013][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.769311][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.843054][ T1151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.907574][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.915560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.947254][ T5141] Bluetooth: hci2: command 0x040f tx timeout [ 273.046594][ T1151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.253175][ T1151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.446128][ T1151] bridge_slave_1: left allmulticast mode [ 273.456008][ T1151] bridge_slave_1: left promiscuous mode [ 273.462541][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.475093][ T1151] bridge_slave_0: left allmulticast mode [ 273.482304][ T1151] bridge_slave_0: left promiscuous mode [ 273.489696][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.020045][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.036212][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.053083][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.061683][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.062923][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.084564][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.094619][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.120380][ T1151] bond0 (unregistering): Released all slaves [ 274.462793][ T1151] hsr_slave_0: left promiscuous mode [ 274.471025][ T1151] hsr_slave_1: left promiscuous mode [ 274.483756][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.492187][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.504496][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.511959][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.532644][ T1151] veth1_macvtap: left promiscuous mode [ 274.538437][ T1151] veth0_macvtap: left promiscuous mode [ 274.544058][ T1151] veth1_vlan: left promiscuous mode [ 274.551773][ T1151] veth0_vlan: left promiscuous mode [ 275.031415][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 275.195798][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 275.405975][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.418841][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.434945][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.443348][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.458366][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.762926][T11010] chnl_net:caif_netlink_parms(): no params data found [ 276.147280][ T5840] Bluetooth: hci1: command tx timeout [ 276.231451][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.244884][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.256098][T11010] bridge_slave_0: entered allmulticast mode [ 276.266513][T11010] bridge_slave_0: entered promiscuous mode [ 276.279249][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.287650][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.294913][T11010] bridge_slave_1: entered allmulticast mode [ 276.303145][T11010] bridge_slave_1: entered promiscuous mode [ 276.431543][T11058] macvlan5: entered promiscuous mode [ 276.461742][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.475659][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.525268][T11060] __nla_validate_parse: 1 callbacks suppressed [ 276.525287][T11060] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1383'. [ 276.525291][T11057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.654478][T11010] team0: Port device team_slave_0 added [ 276.892667][T11010] team0: Port device team_slave_1 added [ 277.112907][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.125992][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 277.141648][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.171759][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.250517][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.298484][T11028] chnl_net:caif_netlink_parms(): no params data found [ 277.349744][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.366768][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.447299][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.508205][ T5840] Bluetooth: hci2: command tx timeout [ 277.566198][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.788822][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.803334][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 277.873460][T11010] hsr_slave_0: entered promiscuous mode [ 277.899979][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 277.918071][T11010] hsr_slave_1: entered promiscuous mode [ 278.012921][T11109] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.046167][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 278.072646][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.192096][T11114] IPv6: Can't replace route, no match found [ 278.227444][ T5840] Bluetooth: hci1: command tx timeout [ 278.235267][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 278.245208][T11124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 278.537384][T11138] netlink: 'syz.1.1402': attribute type 4 has an invalid length. [ 278.589794][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 278.601079][T11135] netlink: 'syz.1.1402': attribute type 4 has an invalid length. [ 278.682236][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.689840][T11028] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.697681][T11028] bridge_slave_0: entered allmulticast mode [ 278.705154][T11028] bridge_slave_0: entered promiscuous mode [ 278.734726][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.758694][T11144] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 278.807502][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.817597][T11028] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.824984][T11028] bridge_slave_1: entered allmulticast mode [ 278.858741][T11028] bridge_slave_1: entered promiscuous mode [ 279.038126][T11028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.087441][T11028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.120599][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 279.230038][T11028] team0: Port device team_slave_0 added [ 279.282376][T11162] pim6reg: entered allmulticast mode [ 279.288575][ T1151] bridge_slave_1: left allmulticast mode [ 279.294370][ T1151] bridge_slave_1: left promiscuous mode [ 279.300960][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.314062][ T1151] bridge_slave_0: left allmulticast mode [ 279.328983][ T1151] bridge_slave_0: left promiscuous mode [ 279.343624][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.589320][ T5840] Bluetooth: hci2: command tx timeout [ 279.842950][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.857485][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.869192][ T1151] bond0 (unregistering): Released all slaves [ 279.916344][T11028] team0: Port device team_slave_1 added [ 280.083727][T11028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.091053][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.125215][T11028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.145085][T11028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.151913][T11165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.152797][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.195231][T11028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.305650][T11174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1413'. [ 280.319713][ T5840] Bluetooth: hci1: command tx timeout [ 280.474273][T11171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 280.490638][ T1151] hsr_slave_0: left promiscuous mode [ 280.497256][ T1151] hsr_slave_1: left promiscuous mode [ 280.503220][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.511174][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.520619][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.528424][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.552900][ T1151] veth1_macvtap: left promiscuous mode [ 280.558997][ T1151] veth0_macvtap: left promiscuous mode [ 280.564666][ T1151] veth1_vlan: left promiscuous mode [ 280.570646][ T1151] veth0_vlan: left promiscuous mode [ 281.103904][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 281.181135][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 281.624649][T11028] hsr_slave_0: entered promiscuous mode [ 281.655736][T11028] hsr_slave_1: entered promiscuous mode [ 281.662966][T11028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.670808][T11028] Cannot create hsr debugfs directory [ 281.677817][ T5840] Bluetooth: hci2: command tx timeout [ 281.779677][T11187] __nla_validate_parse: 2 callbacks suppressed [ 281.779698][T11187] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1417'. [ 282.085629][T11010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.156618][T11198] openvswitch: netlink: IP tunnel dst address not specified [ 282.176333][T11198] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 282.185043][T11010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.284633][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.295321][T11010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.342409][T11010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.387175][ T5840] Bluetooth: hci1: command tx timeout [ 282.443342][T11205] vlan2: entered allmulticast mode [ 282.449322][T11205] veth0_to_hsr: entered allmulticast mode [ 282.543867][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1424'. [ 282.822187][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 282.832112][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 282.983665][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.032324][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.076164][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.083387][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.123685][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.130956][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.387376][T11235] nbd: must specify a device to reconfigure [ 283.562901][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.572625][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.583230][T11245] netlink: 'syz.4.1434': attribute type 14 has an invalid length. [ 283.712136][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 283.747357][ T5840] Bluetooth: hci2: command tx timeout [ 283.774277][T11028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.825118][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.863934][T11028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.889971][T11028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.935561][T11028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.020712][T11259] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1438'. [ 284.080634][T11010] veth0_vlan: entered promiscuous mode [ 284.113227][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1439'. [ 284.125996][T11263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1439'. [ 284.178483][T11010] veth1_vlan: entered promiscuous mode [ 284.269513][T11010] veth0_macvtap: entered promiscuous mode [ 284.304244][T11010] veth1_macvtap: entered promiscuous mode [ 284.403588][T11028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.448114][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.512586][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.550248][T11010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.564929][T11010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.584269][T11010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.595818][T11010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.621661][T11028] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.704275][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.711585][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.779773][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.787011][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.909653][T11291] netlink: 'syz.1.1448': attribute type 8 has an invalid length. [ 284.956550][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.003539][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.352058][T11295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.398050][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.419342][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.543915][T11295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.655542][T11295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.808623][T11295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.946591][T11028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.055638][T11028] veth0_vlan: entered promiscuous mode [ 286.070055][T11028] veth1_vlan: entered promiscuous mode [ 286.160033][T11295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.210689][T11295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.245772][T11320] x_tables: duplicate underflow at hook 1 [ 286.264467][T11320] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003 [ 286.304043][ T7591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.392415][T11295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.422883][T11028] veth0_macvtap: entered promiscuous mode [ 286.492161][T11295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.590613][ T7591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.638504][T11028] veth1_macvtap: entered promiscuous mode [ 286.685624][ T7591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.721291][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.757246][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.778602][T11028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.790914][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.804543][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.821954][T11028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.853235][ T7591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.881023][T11028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.891015][T11028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.900419][T11028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.909834][T11028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.146035][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.166989][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.196603][ T7591] bridge_slave_1: left allmulticast mode [ 287.203309][ T7591] bridge_slave_1: left promiscuous mode [ 287.217320][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.228585][ T7591] bridge_slave_0: left allmulticast mode [ 287.234337][ T7591] bridge_slave_0: left promiscuous mode [ 287.246446][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.950351][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.968980][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.990229][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.009911][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.018036][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.163170][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.175851][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.190811][ T7591] bond0 (unregistering): Released all slaves [ 288.266089][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.285955][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.559036][T11341] lo speed is unknown, defaulting to 1000 [ 288.604502][T11345] __nla_validate_parse: 4 callbacks suppressed [ 288.604525][T11345] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1459'. [ 288.625742][T11345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.700391][T11341] lo speed is unknown, defaulting to 1000 [ 288.781055][T11341] lo speed is unknown, defaulting to 1000 [ 288.831742][T11341] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.981511][ T7591] hsr_slave_0: left promiscuous mode [ 288.997328][ T7591] hsr_slave_1: left promiscuous mode [ 289.006118][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.024560][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.052752][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.065283][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.111615][ T7591] veth1_macvtap: left promiscuous mode [ 289.127604][ T7591] veth0_macvtap: left promiscuous mode [ 289.137774][ T7591] veth1_vlan: left promiscuous mode [ 289.149818][ T7591] veth0_vlan: left promiscuous mode [ 289.849797][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 289.904021][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 290.159624][ T5840] Bluetooth: hci1: command tx timeout [ 290.721819][T11341] lo speed is unknown, defaulting to 1000 [ 290.732275][T11341] lo speed is unknown, defaulting to 1000 [ 290.763587][T11341] lo speed is unknown, defaulting to 1000 [ 290.818172][T11341] lo speed is unknown, defaulting to 1000 [ 290.825797][T11341] lo speed is unknown, defaulting to 1000 [ 290.925856][T11336] chnl_net:caif_netlink_parms(): no params data found [ 291.389540][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.406880][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.414264][T11336] bridge_slave_0: entered allmulticast mode [ 291.438880][T11336] bridge_slave_0: entered promiscuous mode [ 291.458710][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.466023][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.477268][T11336] bridge_slave_1: entered allmulticast mode [ 291.485169][T11336] bridge_slave_1: entered promiscuous mode [ 291.659661][ T7591] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.723521][T11336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.769779][T11336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.011299][ T7591] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.167723][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.177531][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.190036][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.198159][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.207944][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.227161][ T5840] Bluetooth: hci1: command tx timeout [ 292.331021][ T7591] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.365018][T11336] team0: Port device team_slave_0 added [ 292.386109][T11390] tipc: Enabled bearer , priority 0 [ 292.396450][T11336] team0: Port device team_slave_1 added [ 292.440223][ T7591] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.460858][T11386] tipc: Disabling bearer [ 292.555562][T11388] lo speed is unknown, defaulting to 1000 [ 292.632358][T11336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.656207][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.699665][T11336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.721540][T11336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.731360][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.789529][T11336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.878931][T11407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1477'. [ 293.116027][T11336] hsr_slave_0: entered promiscuous mode [ 293.122764][T11414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1479'. [ 293.123963][T11336] hsr_slave_1: entered promiscuous mode [ 293.168545][T11414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1479'. [ 293.195990][T11415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1478'. [ 293.218958][T11415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1478'. [ 293.314132][ T7591] bridge_slave_1: left allmulticast mode [ 293.320664][ T7591] bridge_slave_1: left promiscuous mode [ 293.329153][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.340951][ T7591] bridge_slave_0: left allmulticast mode [ 293.347135][ T7591] bridge_slave_0: left promiscuous mode [ 293.355038][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.241952][ T7591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.255009][ T7591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.279466][ T7591] bond0 (unregistering): Released all slaves [ 294.316983][ T5840] Bluetooth: hci2: command tx timeout [ 294.317036][ T5141] Bluetooth: hci1: command tx timeout [ 294.438805][T11427] x_tables: duplicate underflow at hook 2 [ 294.921862][T11451] delete_channel: no stack [ 295.109518][ T7591] hsr_slave_0: left promiscuous mode [ 295.131686][ T7591] hsr_slave_1: left promiscuous mode [ 295.138803][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.146270][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.180450][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.192053][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 295.198094][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.252656][ T7591] veth1_macvtap: left promiscuous mode [ 295.265978][ T7591] veth0_macvtap: left promiscuous mode [ 295.287110][ T7591] veth1_vlan: left promiscuous mode [ 295.292690][ T7591] veth0_vlan: left promiscuous mode [ 295.515342][T11470] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1492'. [ 295.542003][T11470] unsupported nlmsg_type 40 [ 295.578588][T11470] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1492'. [ 296.046037][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 296.104461][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 296.387571][ T5141] Bluetooth: hci1: command tx timeout [ 296.387580][ T5840] Bluetooth: hci2: command tx timeout [ 296.815173][T11472] IPVS: set_ctl: invalid protocol: 4 172.30.1.2:20003 [ 296.897540][T11388] chnl_net:caif_netlink_parms(): no params data found [ 297.324791][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1501'. [ 297.487672][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.504110][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.513719][T11388] bridge_slave_0: entered allmulticast mode [ 297.523899][T11388] bridge_slave_0: entered promiscuous mode [ 297.578374][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.585733][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.603962][T11388] bridge_slave_1: entered allmulticast mode [ 297.622677][T11388] bridge_slave_1: entered promiscuous mode [ 297.631905][T11512] netlink: 'syz.1.1502': attribute type 39 has an invalid length. [ 297.794993][T11518] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 297.840153][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.854655][T11509] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 297.875855][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.041054][T11388] team0: Port device team_slave_0 added [ 298.072184][T11527] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 298.104293][T11388] team0: Port device team_slave_1 added [ 298.185697][T11534] xt_socket: unknown flags 0x3c [ 298.198574][T11534] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1507'. [ 298.236442][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.262368][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.323405][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.350741][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 298.388002][T11542] netlink: set zone limit has 8 unknown bytes [ 298.450358][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.462825][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.495769][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.512084][ T5141] Bluetooth: hci2: command tx timeout [ 298.746274][T11336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.831946][T11336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.887645][T11553] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 298.977000][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 299.137342][T11388] hsr_slave_0: entered promiscuous mode [ 299.188924][T11388] hsr_slave_1: entered promiscuous mode [ 299.269441][T11388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.288502][T11388] Cannot create hsr debugfs directory [ 299.303017][T11558] ÿ: renamed from dummy0 (while UP) [ 299.315235][T11336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.335560][T11336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.709637][T11577] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1520'. [ 299.959558][T11588] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1524'. [ 299.997215][T11336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.095342][T11336] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.154156][ T7591] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.161442][ T7591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.213897][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.221159][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.374009][T11336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.428281][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 300.525041][T11388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.552788][ T5141] Bluetooth: hci2: command tx timeout [ 300.582235][T11388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.600452][T11388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.626064][T11388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.704481][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 300.794016][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 300.808675][T11623] netlink: 'syz.0.1535': attribute type 39 has an invalid length. [ 300.929417][T11336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.074110][T11388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.162093][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.175370][T11336] veth0_vlan: entered promiscuous mode [ 301.202323][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.209565][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.220564][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 301.238496][T11336] veth1_vlan: entered promiscuous mode [ 301.284749][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.292034][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.413835][T11644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 301.481055][T11647] sctp: [Deprecated]: syz.0.1544 (pid 11647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.481055][T11647] Use struct sctp_sack_info instead [ 301.498466][T11336] veth0_macvtap: entered promiscuous mode [ 301.550855][T11336] veth1_macvtap: entered promiscuous mode [ 301.623341][T11336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.645202][T11655] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 301.662582][T11336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.697290][T11658] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 301.710331][T11336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.722869][T11336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.753055][T11336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.763689][T11336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.830462][T11660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1547'. [ 301.929935][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.973119][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.013358][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.074655][T11668] xt_hashlimit: overflow, try lower: 4294967295/0 [ 302.106536][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.122816][T11388] veth0_vlan: entered promiscuous mode [ 302.129409][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.173994][T11388] veth1_vlan: entered promiscuous mode [ 302.296137][T11388] veth0_macvtap: entered promiscuous mode [ 302.335611][T11388] veth1_macvtap: entered promiscuous mode [ 302.354786][T11675] netlink: 'syz.0.1552': attribute type 11 has an invalid length. [ 302.365482][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.384844][T11675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1552'. [ 302.385315][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.442895][T11388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.528744][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.569050][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.595306][T11388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.634935][T11388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.650446][T11388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.676895][T11388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.685676][T11388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.835407][T11703] openvswitch: netlink: Key type 10512 is out of range max 32 [ 302.937681][T11712] sctp: [Deprecated]: syz.0.1559 (pid 11712) Use of int in maxseg socket option. [ 302.937681][T11712] Use struct sctp_assoc_value instead [ 302.959269][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 302.981592][ T3652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.100375][T11712] vlan2: entered promiscuous mode [ 303.106320][T11712] bond0: entered promiscuous mode [ 303.204789][ T3652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.251770][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.260537][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.350290][ T3652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.454641][ T3652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.487077][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.494970][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.781469][ T3652] bridge_slave_1: left allmulticast mode [ 303.788037][ T3652] bridge_slave_1: left promiscuous mode [ 303.793769][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.803882][ T3652] bridge_slave_0: left allmulticast mode [ 303.809967][ T3652] bridge_slave_0: left promiscuous mode [ 303.815723][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.225180][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 304.264196][T11722] netlink: 'syz.1.1563': attribute type 11 has an invalid length. [ 304.552896][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.590985][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.616438][ T3652] bond0 (unregistering): Released all slaves [ 304.657603][T11731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1562'. [ 304.892752][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.902501][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.912951][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.924996][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.935106][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.963877][ T3652] hsr_slave_0: left promiscuous mode [ 304.970439][ T3652] hsr_slave_1: left promiscuous mode [ 304.976299][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.984786][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.992994][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.002012][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.023251][ T3652] veth1_macvtap: left promiscuous mode [ 305.029266][ T3652] veth0_macvtap: left promiscuous mode [ 305.034891][ T3652] veth1_vlan: left promiscuous mode [ 305.040730][ T3652] veth0_vlan: left promiscuous mode [ 305.488166][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 305.530899][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 305.939994][T11733] lo speed is unknown, defaulting to 1000 [ 306.137413][T11733] chnl_net:caif_netlink_parms(): no params data found [ 306.226605][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.234241][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.241844][T11733] bridge_slave_0: entered allmulticast mode [ 306.250052][T11733] bridge_slave_0: entered promiscuous mode [ 306.259053][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.267034][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.274257][T11733] bridge_slave_1: entered allmulticast mode [ 306.281614][T11733] bridge_slave_1: entered promiscuous mode [ 306.325595][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.340098][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.427622][T11747] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1566'. [ 306.541244][T11754] netlink: 'syz.4.1568': attribute type 2 has an invalid length. [ 306.791355][ T3652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.934393][T11733] team0: Port device team_slave_0 added [ 306.947618][ T5840] Bluetooth: hci1: command tx timeout [ 307.009525][ T3652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.070236][T11733] team0: Port device team_slave_1 added [ 307.086123][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.100734][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.112278][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.125274][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.135762][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.167991][ T3652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.365423][ T3652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.397317][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.406640][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.455707][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.470593][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.478015][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.522846][T11787] netlink: 'syz.0.1577': attribute type 4 has an invalid length. [ 307.533337][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.541753][T11787] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1577'. [ 307.552809][T11766] lo speed is unknown, defaulting to 1000 [ 307.759424][T11733] hsr_slave_0: entered promiscuous mode [ 307.766220][T11733] hsr_slave_1: entered promiscuous mode [ 307.818543][T11795] batadv0: entered promiscuous mode [ 307.824632][T11795] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 307.836597][T11795] bond0: (slave macvlan6): making interface the new active one [ 307.847249][T11795] bond0: (slave macvlan6): Enslaving as an active interface with an up link [ 308.151371][ T3652] bridge_slave_1: left allmulticast mode [ 308.158118][ T3652] bridge_slave_1: left promiscuous mode [ 308.163892][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.173739][ T3652] bridge_slave_0: left allmulticast mode [ 308.180520][ T3652] bridge_slave_0: left promiscuous mode [ 308.186448][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.539164][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.554345][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.566220][ T3652] bond0 (unregistering): Released all slaves [ 309.031267][ T5141] Bluetooth: hci1: command tx timeout [ 309.035843][T11813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 309.197707][ T5141] Bluetooth: hci2: command tx timeout [ 310.525103][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 310.574856][T11829] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 310.588248][T11829] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1591'. [ 310.694926][T11831] syzkaller0: entered promiscuous mode [ 310.714156][T11831] syzkaller0: entered allmulticast mode [ 310.795070][ T3652] hsr_slave_0: left promiscuous mode [ 310.806215][ T3652] hsr_slave_1: left promiscuous mode [ 310.815218][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.828715][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.841016][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.851885][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.901829][ T3652] veth1_macvtap: left promiscuous mode [ 310.909359][ T3652] veth0_macvtap: left promiscuous mode [ 310.915246][ T3652] veth1_vlan: left promiscuous mode [ 310.921815][ T3652] veth0_vlan: left promiscuous mode [ 311.107778][ T5141] Bluetooth: hci1: command tx timeout [ 311.266770][ T5141] Bluetooth: hci2: command tx timeout [ 311.565494][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 311.611755][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 312.070001][T11766] chnl_net:caif_netlink_parms(): no params data found [ 312.349955][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 312.557202][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.564501][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.581517][T11766] bridge_slave_0: entered allmulticast mode [ 312.598736][T11766] bridge_slave_0: entered promiscuous mode [ 312.609975][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.620525][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.630965][T11766] bridge_slave_1: entered allmulticast mode [ 312.643971][T11766] bridge_slave_1: entered promiscuous mode [ 312.780325][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.828842][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.955365][T11891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1612'. [ 313.000673][T11897] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 313.020819][T11766] team0: Port device team_slave_0 added [ 313.035846][T11766] team0: Port device team_slave_1 added [ 313.125209][T11902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.180801][T11766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.192435][ T5141] Bluetooth: hci1: command tx timeout [ 313.201949][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.232860][T11766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.283626][T11902] veth5: entered promiscuous mode [ 313.292952][T11902] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 313.304394][T11766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.315505][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.342672][T11766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.353503][ T5141] Bluetooth: hci2: command tx timeout [ 313.398760][T11733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.424878][T11733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.451000][T11733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.482078][T11766] hsr_slave_0: entered promiscuous mode [ 313.489901][T11766] hsr_slave_1: entered promiscuous mode [ 313.496408][T11766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.510243][T11766] Cannot create hsr debugfs directory [ 313.517189][T11733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.002188][T11733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.128230][T11733] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.136116][T11930] veth1_macvtap: left promiscuous mode [ 314.186085][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.193337][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.231923][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.239195][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.533696][T11766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.569026][T11766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.591566][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 314.609730][T11946] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1628'. [ 314.627454][T11766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.685975][T11766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.773825][T11733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.899473][T11733] veth0_vlan: entered promiscuous mode [ 314.924194][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.945359][T11733] veth1_vlan: entered promiscuous mode [ 314.974460][T11766] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.061035][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.068323][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.089504][T11965] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 315.110371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.117595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.205735][T11967] rdma_rxe: rxe_newlink: failed to add gre0 [ 315.214513][T11733] veth0_macvtap: entered promiscuous mode [ 315.244632][T11733] veth1_macvtap: entered promiscuous mode [ 315.255270][T11967] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1635'. [ 315.266149][T11967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.292972][T11967] rdma_rxe: rxe_newlink: failed to add gre0 [ 315.340450][T11733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.381510][T11733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.427263][ T5141] Bluetooth: hci2: command tx timeout [ 315.432386][T11733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.471771][T11733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.486444][T11733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.501247][T11733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.783614][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.796035][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.882496][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.902559][T11766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.916047][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.106456][T12001] sctp: [Deprecated]: syz.0.1643 (pid 12001) Use of int in max_burst socket option deprecated. [ 316.106456][T12001] Use struct sctp_assoc_value instead [ 316.141113][T12004] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1645'. [ 316.217534][T11766] veth0_vlan: entered promiscuous mode [ 316.231705][T11766] veth1_vlan: entered promiscuous mode [ 316.277690][T12009] SET target dimension over the limit! [ 316.285904][T11766] veth0_macvtap: entered promiscuous mode [ 316.306875][T11766] veth1_macvtap: entered promiscuous mode [ 316.313704][T12009] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 316.349518][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.360946][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.373155][T11766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.386263][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.398081][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.409697][T11766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.421413][T11766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.432258][T11766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.441351][T11766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.450910][T11766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.556273][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.573108][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.612981][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.621985][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.867838][ T3652] wlan1: Trigger new scan to find an IBSS to join [ 316.875316][ T3652] ------------[ cut here ]------------ [ 316.881123][ T3652] WARNING: CPU: 0 PID: 3652 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 316.891723][ T3652] Modules linked in: [ 316.895949][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.908790][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.919189][ T3652] Workqueue: events_unbound cfg80211_wiphy_work [ 316.925707][ T3652] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 316.932457][ T3652] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 316.953258][ T3652] RSP: 0018:ffffc9000c4978a0 EFLAGS: 00010293 [ 316.959978][ T3652] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff888030959e00 [ 316.968362][ T3652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.977141][ T3652] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92001892ec4 [ 316.985172][ T3652] R10: dffffc0000000000 R11: fffff52001892ec5 R12: ffff88805eae3268 [ 316.993720][ T3652] R13: ffff88805eae0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 317.004420][ T3652] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 317.013522][ T3652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.020620][ T3652] CR2: 0000200000000000 CR3: 0000000064210000 CR4: 00000000003526f0 [ 317.029864][ T3652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.038022][ T3652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.046621][ T3652] Call Trace: [ 317.050405][ T3652] [ 317.053393][ T3652] ieee80211_ibss_work+0xde7/0x1060 [ 317.059152][ T3652] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 317.064865][ T3652] ? ieee80211_iface_work+0xf39/0xfe0 [ 317.070342][ T3652] ? rcu_is_watching+0x15/0xb0 [ 317.075169][ T3652] cfg80211_wiphy_work+0x2dc/0x460 [ 317.080440][ T3652] ? process_scheduled_works+0x9ec/0x17a0 [ 317.086209][ T3652] process_scheduled_works+0xadb/0x17a0 [ 317.092193][ T3652] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.098350][ T3652] worker_thread+0x8a0/0xda0 [ 317.102982][ T3652] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.109672][ T3652] ? __kthread_parkme+0x7b/0x200 [ 317.114666][ T3652] kthread+0x70e/0x8a0 [ 317.119199][ T3652] ? __pfx_worker_thread+0x10/0x10 [ 317.124362][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.129077][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.133706][ T3652] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.139072][ T3652] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.144892][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.149973][ T3652] ret_from_fork+0x4b/0x80 [ 317.154781][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.159501][ T3652] ret_from_fork_asm+0x1a/0x30 [ 317.164324][ T3652] [ 317.167437][ T3652] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.174742][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 317.186905][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.196973][ T3652] Workqueue: events_unbound cfg80211_wiphy_work [ 317.203237][ T3652] Call Trace: [ 317.206525][ T3652] [ 317.209464][ T3652] dump_stack_lvl+0x99/0x250 [ 317.214070][ T3652] ? __asan_memcpy+0x40/0x70 [ 317.218670][ T3652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.223911][ T3652] ? __pfx__printk+0x10/0x10 [ 317.228529][ T3652] panic+0x2db/0x790 [ 317.232452][ T3652] ? __pfx_panic+0x10/0x10 [ 317.236887][ T3652] ? show_trace_log_lvl+0x4fb/0x550 [ 317.242111][ T3652] ? ret_from_fork_asm+0x1a/0x30 [ 317.247063][ T3652] __warn+0x31b/0x4b0 [ 317.251061][ T3652] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 317.257062][ T3652] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 317.263061][ T3652] report_bug+0x2be/0x4f0 [ 317.267413][ T3652] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 317.273411][ T3652] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 317.279409][ T3652] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 317.285408][ T3652] handle_bug+0x84/0x160 [ 317.289663][ T3652] exc_invalid_op+0x1a/0x50 [ 317.294175][ T3652] asm_exc_invalid_op+0x1a/0x20 [ 317.299032][ T3652] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 317.305650][ T3652] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 317.325373][ T3652] RSP: 0018:ffffc9000c4978a0 EFLAGS: 00010293 [ 317.331461][ T3652] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff888030959e00 [ 317.339445][ T3652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.347421][ T3652] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92001892ec4 [ 317.355401][ T3652] R10: dffffc0000000000 R11: fffff52001892ec5 R12: ffff88805eae3268 [ 317.363386][ T3652] R13: ffff88805eae0e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 317.371387][ T3652] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 317.377412][ T3652] ieee80211_ibss_work+0xde7/0x1060 [ 317.382643][ T3652] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 317.388301][ T3652] ? ieee80211_iface_work+0xf39/0xfe0 [ 317.393690][ T3652] ? rcu_is_watching+0x15/0xb0 [ 317.398475][ T3652] cfg80211_wiphy_work+0x2dc/0x460 [ 317.403604][ T3652] ? process_scheduled_works+0x9ec/0x17a0 [ 317.409348][ T3652] process_scheduled_works+0xadb/0x17a0 [ 317.414934][ T3652] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.420954][ T3652] worker_thread+0x8a0/0xda0 [ 317.425551][ T3652] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.431913][ T3652] ? __kthread_parkme+0x7b/0x200 [ 317.436871][ T3652] kthread+0x70e/0x8a0 [ 317.441041][ T3652] ? __pfx_worker_thread+0x10/0x10 [ 317.446178][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.450797][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.455397][ T3652] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.460622][ T3652] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.465851][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.470453][ T3652] ret_from_fork+0x4b/0x80 [ 317.474882][ T3652] ? __pfx_kthread+0x10/0x10 [ 317.479484][ T3652] ret_from_fork_asm+0x1a/0x30 [ 317.484270][ T3652] [ 317.487695][ T3652] Kernel Offset: disabled [ 317.492114][ T3652] Rebooting in 86400 seconds..