last executing test programs: 35.134508223s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 35.134458464s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 35.134425631s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 31.469074884s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 20.796384682s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 10.474793036s ago: executing program 1 (id=1190): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000b01021501000000000000000000060d00d99328cc7265616465d880000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async) close(r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x6) 3.601751559s ago: executing program 0 (id=1687): r0 = socket(0x1e, 0x5, 0x0) getpeername$packet(r0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f00000000c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/123, 0x7b}], 0x5}, 0x141) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 3.459374272s ago: executing program 0 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{}, {0x1000000, 0x0, 0x80}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 3.092228947s ago: executing program 0 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0xb, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x4) 2.901348192s ago: executing program 3 (id=1696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000007313a10020001280080001", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000bbdbdf250100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 2.777080576s ago: executing program 0 (id=1697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2b0d00, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 2.628806578s ago: executing program 3 (id=1700): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000010c40)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2.495971162s ago: executing program 0 (id=1701): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x2000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0) read(r5, &(0x7f0000001c40)=""/4096, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb, r8}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0xeb}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xb}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) 2.493312234s ago: executing program 4 (id=1702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) sendmsg$nl_route(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@delnexthop={0x38, 0x69, 0x100, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x40805) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/27, 0x1b}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f00000001c0)="abf66294a902f68e728325cad583071d9f3d6464211c33cbe07a938adaf2ef8038c13165d5862097f3a771b9d69309aae4ab7748d20d6dd153d2eb4eb2d3986bc50392174caa474784b87e7074982a9a8403bba7f17bab45eadc6cb50131f1161bb418257ce524e0ba4d71749ed2c801595c", &(0x7f00000002c0)=""/208, &(0x7f00000003c0)="f5433b710290e07f146b6d870893a50352d4d6afb5ac1fccbe6f3d86c4ae325743ecfa2e761113119703454f9b0e9c3374a33df952788da0a9e02bff989e8a320c9d454ba76ae9426d22eb88f5cf95ea9f2d38530244d11ff956722f2519ed2385431b66a0544a75bc3f29663f43e02d88f1f827db0c27cf92907af8350bb9b6005d7844c1b4b83a74603f847dc8f31c6696febafcbc1683e689d245c6303cb27849", &(0x7f0000000580)="69a68ea3a2bd47cb24f27cdb2fb5664469b24061b685133ec5234b1a0636d1b4cdf4aec5f4b8e0d4347e573af08ad4dad7e7af31c87111b106b908eac5861e7db53a6c17ae52239e4610811bb68c9e2d320a5ed3f0499de1ecb3601f8b60a4b41379e3fb2972f686c299caf14fc2722d3e8b8f896e91a868e547d442de051ed8fcb38d787c2ae577ad0a3a7218b0a2b75e33ef7054b7032af651e99bbb67ed1f7d65befa88ee6e2d52da28b3b9594a2c24079ec9c96725d6ba54c76c089e988b80329c32f8ea28f508ff1643aafd4af3f72adfdbd59f4e6c42b3cc7872f274dabb95202b8c69ff1a9e7bbce9ca8b950556", 0x1, r1, 0x4}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x54, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xeb}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x48081) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delqdisc={0x34, 0x25, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0x8}, {0x0, 0xb}, {0x5, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xbd76}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x27f}]}, 0x34}}, 0x0) 2.363893377s ago: executing program 3 (id=1703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 2.223984073s ago: executing program 4 (id=1705): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0042c4e4bdc163da5e2785cd21000000000000000000000004"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd}, 0x90) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0042c4e4bdc163da5e2785cd21000000000000000000000004"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x20000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) 1.990753584s ago: executing program 4 (id=1707): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.724887644s ago: executing program 4 (id=1709): r0 = socket(0x28, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000004100000000100000000000000080022eb00000000200000000200000000000000003c36000800655800000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 1.512537098s ago: executing program 4 (id=1710): socket(0x2d, 0x800, 0xeea) 1.328039495s ago: executing program 3 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000e07de8db63a812232b60a7b63d00070128bd700008000000037c0000080004000a010101"], 0x1c}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) ppoll(&(0x7f00000000c0)=[{r0, 0x80a1}, {r1, 0x20}], 0x2, &(0x7f00000001c0)={r2, r3+60000000}, &(0x7f0000000200)={[0xff]}, 0x8) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000300)=0x7, 0x4) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) r10 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r10, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x5c, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000099e10000000000000000950000001000000088bdb11ef704efa3af2fd85de198f57bd677703a041502875882e05200b16cfd4a475722a7d8ba2875a907b45d5866f038dd8aef110d190c059e5590bb270712693cb3bdf8f1290850f4d2bb21874b4d315bb971feec219d73e1a8bd67f3ed501d63a4e091bed070eeb8a9b0115631128cf90d690a9faadae705d6fa810a0615645d1f79041c7cdf3c398396"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.326021799s ago: executing program 4 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, 0x13, 0x9, 0x101, 0x70bd2c, 0x25dfdbfd, {0x3, 0x0, 0x6}, [@generic="0d5cec73c9d4057802f78b4a30a22ba5290bd56f41eec25d0e02e63e7b3c10705346dc44dbe9e424022f085c5935b4eaa57a6ca1b9cbcb5b63c67947f73ac648ea7dd8a86c150e3960f14c3b9764790303dbfb848c6544e2176b5997b6c4973beed39cc6bc66f4521a2a63d803132a19076c88ca3885d4d17ae5c2734a93dc7e0a286df3c4c2b67223442b41534a6e86060bea94791ba0f5f5f13a00fb0ba4ddbce6507f0be35ddedd0e9cdf0cf1cfb3c2e6ef28941b9cc0dc66c472463f7b40088bb925cd8a58a47fa311d158fc1045009dcb9e1b1f3b373e34009f8e"]}, 0xf4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.077326546s ago: executing program 2 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448df, &(0x7f0000000240)="810fe052") (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180"], 0x28}}, 0x0) 884.171093ms ago: executing program 2 (id=1716): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000408010300000c000000000000001461c1d403a21dfb963da99bba6e26c800070900010073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008044) 708.119321ms ago: executing program 2 (id=1717): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1b, 0x10, 0xd09, 0xb6b5}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0xc, 0xffffff39, 0x3, r1}, &(0x7f0000000200)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) unshare(0x6020400) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt(r4, 0x200000, 0x81, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800280600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020009907800000512000000020000007f000000070000fa7300005210941cd39943f5b330"], 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000000000000001000000008000900000000000c0001800800030000000000080009000000000008000900aab8000008000600000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000008b00001400451f9b2c5a020076657468305f746f5f7465616d000000"], 0x74}}, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000000000058400000005000000bc8c7fb631e41bf15c61188b820007712bc610a2ba809c4133661705cfc61f1205ded9102b681abeb92cfd437ea82376bc00d8e3822a214fa0add7c30ee776e6d7a530f5b7a1da1be302e2413e6f14eab8b90fb003ddd8c1a614bed45dc9c2414607d8aca2a69b2f05b29d305805c56e53ec40624df835a24632c3b874decfb88fdd3f30915cb4a6ad39d294e26a841280810ba1a837"], 0x10}}], 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180700007700000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000380)={r10, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r12, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4) 474.559173ms ago: executing program 2 (id=1718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 232.126741ms ago: executing program 2 (id=1719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 230.779515ms ago: executing program 3 (id=1720): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711807000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) 143.316036ms ago: executing program 0 (id=1721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400081}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20080801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000809}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x2, 0x20040, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xfffffff9, 0x0}, 0x8) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0), 0x8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x0, 0x10}, 0xc) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x8, 0x9, 0xec, 0x800, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pK \x00'}, 0x20) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x9}, 0xc) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xacc4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x14, 0x26, &(0x7f0000000840)=@raw=[@jmp={0x5, 0x1, 0x4, 0x5, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000980)='GPL\x00', 0x7, 0xc2, &(0x7f00000009c0)=""/194, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x33, r10, 0x8, &(0x7f0000000b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x401, 0x7}, 0x10, r11, r12, 0x3, &(0x7f0000000f40)=[r13, r14, 0x1, r15, r16, r17, r18, r19], &(0x7f0000000f80)=[{0x0, 0x4, 0x8, 0xc}, {0x3, 0x3, 0x9, 0x9}, {0x2, 0x4, 0xb, 0x8}], 0x10, 0x400}, 0x94) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 98.416408ms ago: executing program 3 (id=1722): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x20000000, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)="a3233b30b806ab1987e2a36d64e521578557d1fdc9d65b9b"}, 0x50) 0s ago: executing program 2 (id=1723): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0x5, 0x13}}) r1 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="9b5701", 0x3}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2000000000000000840000000a0000000400abb0a51d190dd4050000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000070000000000000900000000"], 0x38, 0x8011}], 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x10}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3ff, 0x2, [0x9, 0xffff]}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r10, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac09, 0xfac01, 0xfac0d]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 3][ T8144] openvswitch: netlink: Flow actions attr not present in new flow. [ 144.879537][ T8156] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.906476][ T8156] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.933494][ T8156] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 145.025260][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 145.170625][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 145.182046][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 145.240546][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 145.272383][ T8178] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 145.341265][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 145.546255][ T8190] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.590382][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.599029][ T8192] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 145.634934][ T8190] smc: net device bond0 erased user defined pnetid SYZ2 [ 145.783155][ T8200] openvswitch: netlink: Unknown nsh attribute 0 [ 145.799220][ T8192] syz.4.592 (8192) used greatest stack depth: 19464 bytes left [ 145.815950][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.326137][ T8236] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 146.490616][ T8243] Cannot find del_set index 4 as target [ 146.835116][ T8260] tipc: Started in network mode [ 146.849810][ T8260] tipc: Node identity ac1414aa, cluster identity 4711 [ 146.879896][ T8260] tipc: Enabled bearer , priority 10 [ 146.958450][ T8273] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 147.016888][ T6019] IPVS: starting estimator thread 0... [ 147.119405][ T8275] IPVS: using max 25 ests per chain, 60000 per kthread [ 147.641125][ T8312] xt_hashlimit: max too large, truncated to 1048576 [ 147.898961][ T8331] xt_limit: Overflow, try lower: 2147483649/128 [ 147.996874][ T5918] tipc: Node number set to 2886997162 [ 148.439466][ T8349] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 148.559559][ T8353] __nla_validate_parse: 11 callbacks suppressed [ 148.559581][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'. [ 148.672979][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 148.683581][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 148.963473][ T8370] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.993197][ T8368] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 149.243443][ T8380] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 149.397489][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 149.443303][ T8393] netlink: 72 bytes leftover after parsing attributes in process `syz.3.650'. [ 149.482464][ T8393] netlink: 72 bytes leftover after parsing attributes in process `syz.3.650'. [ 149.499823][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 149.522669][ T8390] bond1: (slave gretap1): making interface the new active one [ 149.536275][ T8390] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 149.570350][ T8391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.629594][ T8398] : entered promiscuous mode [ 149.710457][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 149.793583][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 149.833322][ T8410] bridge_slave_1 (unregistering): left allmulticast mode [ 149.842417][ T8410] bridge_slave_1 (unregistering): left promiscuous mode [ 149.855310][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.202519][ T8437] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 150.211338][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 150.226004][ T8437] netlink: 'syz.3.664': attribute type 2 has an invalid length. [ 150.402231][ T8439] bridge0: port 1(dummy0) entered disabled state [ 150.784793][ T8439] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.815023][ T8439] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.836846][ T8439] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.863479][ T8439] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.982746][ T8439] veth3: left promiscuous mode [ 151.002904][ T8439] veth3: left allmulticast mode [ 151.025218][ T8439] veth5: left allmulticast mode [ 151.068777][ T8445] bridge0: entered allmulticast mode [ 151.491094][ T8487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.627849][ T8500] netlink: 'syz.1.675': attribute type 32 has an invalid length. [ 151.657163][ T8500] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 152.328563][ T8546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.413679][ T8554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.630262][ T8567] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 152.902738][ T8573] IPVS: ip_vs_add_dest(): server weight less than zero [ 152.933280][ T5932] IPVS: starting estimator thread 0... [ 152.950424][ T8573] sctp: [Deprecated]: syz.1.696 (pid 8573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.950424][ T8573] Use struct sctp_sack_info instead [ 152.989207][ T8580] sit0: Master is either lo or non-ether device [ 153.057944][ T8581] IPVS: using max 29 ests per chain, 69600 per kthread [ 153.478184][ T8607] netlink: 'syz.3.705': attribute type 39 has an invalid length. [ 153.698161][ T8616] netlink: 'syz.2.707': attribute type 64 has an invalid length. [ 153.739638][ T8616] __nla_validate_parse: 8 callbacks suppressed [ 153.739662][ T8616] netlink: 5 bytes leftover after parsing attributes in process `syz.2.707'. [ 153.870347][ T8622] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 153.886874][ T8622] netlink: 224 bytes leftover after parsing attributes in process `syz.4.710'. [ 153.901611][ T8624] netlink: 9 bytes leftover after parsing attributes in process `syz.0.709'. [ 153.917288][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 153.929348][ T8626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.979837][ T8628] veth0: entered promiscuous mode [ 153.990765][ T8627] veth0: left promiscuous mode [ 154.016085][ T8624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 154.241567][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 154.288183][ T8648] openvswitch: netlink: IPv6 tunnel dst address is zero [ 154.299228][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 154.314411][ T8648] dummy0: left allmulticast mode [ 154.321186][ T8648] dummy0: left promiscuous mode [ 154.326504][ T8648] bridge0: port 1(dummy0) entered disabled state [ 154.446969][ T8660] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 154.516854][ T8660] netlink: 119 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.577915][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.626839][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 154.734189][ T8669] dvmrp1: entered allmulticast mode [ 154.763065][ T8669] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 154.779353][ T8669] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 154.788498][ T8670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.649287][ T8722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.956613][ T8755] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 155.978911][ T8755] netlink: 'syz.3.747': attribute type 8 has an invalid length. [ 156.537181][ T8790] Cannot find add_set index 1 as target [ 157.313579][ T8838] xfrm1: entered allmulticast mode [ 157.355931][ T8841] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 157.551801][ T8849] xt_CT: No such helper "netbios-ns" [ 157.736541][ T8855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.738312][ T8863] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 157.841862][ T8855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.961455][ T8855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.084915][ T8855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.266240][ T8855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.373401][ T8855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.481105][ T8855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.526253][ T8855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.690686][ T8903] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 158.700806][ T8903] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 158.890973][ T8916] : renamed from hsr0 [ 159.096235][ T8937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.103850][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 159.111248][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 159.259694][ T8942] tipc: Started in network mode [ 159.266548][ T8942] tipc: Node identity f6833a91dea5, cluster identity 4711 [ 159.277961][ T8942] tipc: Enabled bearer , priority 0 [ 159.349423][ T8953] __nla_validate_parse: 17 callbacks suppressed [ 159.349445][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 159.384355][ T8956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.811'. [ 159.400813][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 159.454674][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 160.277255][ T8467] tipc: Node number set to 673594001 [ 160.578537][ T8945] syzkaller0: entered promiscuous mode [ 160.584112][ T8945] syzkaller0: entered allmulticast mode [ 160.691601][ T8947] tipc: Resetting bearer [ 160.744271][ T8947] tipc: Disabling bearer [ 161.018917][ T8986] validate_nla: 1 callbacks suppressed [ 161.018937][ T8986] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 161.363239][ T8998] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.535637][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 161.743454][ T9024] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 161.763191][ T9024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.882756][ T9031] batadv_slave_1: entered promiscuous mode [ 161.901018][ T9031] macvtap1: entered allmulticast mode [ 161.916795][ T9031] batadv_slave_1: entered allmulticast mode [ 161.956055][ T9035] netlink: 'syz.1.834': attribute type 12 has an invalid length. [ 161.978995][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 162.012819][ T9041] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 162.024076][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 162.065755][ T9044] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.079627][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 162.444182][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.477284][ T9070] netlink: 'syz.2.842': attribute type 21 has an invalid length. [ 162.485246][ T9070] netlink: 'syz.2.842': attribute type 22 has an invalid length. [ 162.496570][ T9070] netlink: 'syz.2.842': attribute type 23 has an invalid length. [ 162.512805][ T9070] netlink: 'syz.2.842': attribute type 25 has an invalid length. [ 162.520880][ T9070] netlink: 'syz.2.842': attribute type 26 has an invalid length. [ 162.530383][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 162.608327][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.622967][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.719370][ T9065] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.728369][ T9065] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.738276][ T9065] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.747861][ T9065] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.802538][ T9065] batadv_slave_1: left allmulticast mode [ 163.037231][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.848'. [ 163.201727][ T9104] syz.2.853 uses old SIOCAX25GETINFO [ 163.290295][ T9110] No such timeout policy "syz0" [ 163.882674][ T9131] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 163.891544][ T9131] netlink: 'syz.4.861': attribute type 4 has an invalid length. [ 165.404290][ T9115] vlan2: entered allmulticast mode [ 165.409552][ T9115] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 165.427153][ T9128] __nla_validate_parse: 4 callbacks suppressed [ 165.427175][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 165.567525][ T9143] vlan1: entered allmulticast mode [ 165.587810][ T9143] veth0_vlan: entered allmulticast mode [ 165.760411][ T9154] netlink: 'syz.1.867': attribute type 11 has an invalid length. [ 166.075718][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'. [ 166.180549][ T9179] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.875'. [ 166.301557][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'. [ 166.552215][ T9204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.880'. [ 166.569948][ T9204] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 166.587290][ T9204] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 166.780595][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 166.842477][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 166.893394][ T9218] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 166.908739][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.213115][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 167.256134][ T9246] tls_set_device_offload_rx: netdev not found [ 167.287432][ T9246] netlink: 248 bytes leftover after parsing attributes in process `syz.3.898'. [ 167.304745][ T9246] netlink: 23 bytes leftover after parsing attributes in process `syz.3.898'. [ 167.489124][ T9261] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 167.561266][ T9266] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 167.586874][ T9266] netlink: 'syz.3.903': attribute type 2 has an invalid length. [ 168.227540][ T9314] SET target dimension over the limit! [ 168.248586][ T9314] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 168.265805][ T9314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.595443][ T9327] xt_policy: too many policy elements [ 168.660173][ T9334] netlink: 'syz.2.926': attribute type 11 has an invalid length. [ 168.692780][ T9333] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.718068][ T8457] IPVS: starting estimator thread 0... [ 168.807718][ T9341] IPVS: using max 26 ests per chain, 62400 per kthread [ 169.056605][ T9361] bridge0: port 3(batadv0) entered disabled state [ 169.113273][ T9361] bridge_slave_0: left allmulticast mode [ 169.137409][ T9361] bridge_slave_0: left promiscuous mode [ 169.143310][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.598875][ T9393] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 169.776840][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 169.821484][ T9401] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 169.829128][ T9402] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 169.836604][ T9402] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 169.871228][ T9402] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 170.217854][ T9426] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 170.254253][ T9439] netlink: zone id is out of range [ 170.262830][ T9439] netlink: get zone limit has 8 unknown bytes [ 170.325757][ T9441] netlink: 'syz.1.956': attribute type 2 has an invalid length. [ 170.346552][ T9441] netlink: 'syz.1.956': attribute type 2 has an invalid length. [ 170.471193][ T9448] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 170.575606][ T9451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.605915][ T9451] bridge0: port 1(bond2) entered blocking state [ 170.612947][ T9451] bridge0: port 1(bond2) entered disabled state [ 170.620656][ T9451] bond2: entered allmulticast mode [ 170.634462][ T9451] bond2: entered promiscuous mode [ 170.646045][ T9451] bridge0: port 1(bond2) entered blocking state [ 170.653912][ T9451] bridge0: port 1(bond2) entered forwarding state [ 170.664806][ T9464] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 170.688475][ T9464] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 170.724100][ T7946] bridge0: port 1(bond2) entered disabled state [ 171.002347][ T9481] set match dimension is over the limit! [ 172.106523][ T9479] __nla_validate_parse: 81 callbacks suppressed [ 172.106544][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.966'. [ 172.148562][ T9488] netlink: 'syz.0.967': attribute type 29 has an invalid length. [ 172.292137][ T9496] : renamed from hsr0 [ 172.361134][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 172.570157][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 172.587384][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.976'. [ 172.604609][ T5168] Bluetooth: hci4: link tx timeout [ 172.611755][ T5168] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.625067][ T5856] Bluetooth: hci4: link tx timeout [ 172.630518][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.638392][ T5856] Bluetooth: hci4: link tx timeout [ 172.643637][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.059754][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.104748][ T9541] netlink: 'syz.4.986': attribute type 2 has an invalid length. [ 173.133352][ T9541] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.986'. [ 173.157440][ T9541] nbd: must specify a device to reconfigure [ 173.220157][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 173.339047][ T9551] openvswitch: netlink: IPv4 tun info is not correct [ 173.425867][ T9560] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 173.693968][ T9577] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 174.078726][ T9603] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1003'. [ 174.292203][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'. [ 174.460777][ T9624] xt_CT: No such helper "snmp" [ 174.627057][ T9637] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 174.649182][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 174.658697][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 174.687059][ T9637] batadv0: entered promiscuous mode [ 174.697582][ T9637] batadv0: entered allmulticast mode [ 174.713534][ T9637] bridge0: port 3(batadv0) entered blocking state [ 174.757227][ T9637] bridge0: port 3(batadv0) entered disabled state [ 174.764503][ T9643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1014'. [ 174.789247][ T9637] bridge0: port 3(batadv0) entered blocking state [ 174.795984][ T9637] bridge0: port 3(batadv0) entered forwarding state [ 174.844134][ T7943] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 174.853716][ T7943] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 175.113376][ T9661] netlink: zone id is out of range [ 175.458204][ T5168] Bluetooth: hci0: command tx timeout [ 177.453255][ T9762] __nla_validate_parse: 3 callbacks suppressed [ 177.453274][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 177.490818][ T9769] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 177.548869][ T9769] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 177.592049][ T9769] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 177.607591][ T9771] netlink: 'syz.3.1047': attribute type 29 has an invalid length. [ 177.854991][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 177.876850][ T9784] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 179.491976][ T9784] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 179.549885][ T9822] bond2: entered promiscuous mode [ 179.555017][ T9822] bond2: entered allmulticast mode [ 179.560952][ T9822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.636491][ T9825] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 179.645501][ T9825] netlink: 'syz.1.1064': attribute type 29 has an invalid length. [ 179.794771][ T9837] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 180.061601][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 180.214171][ T9866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.338111][ T9874] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 180.350402][ T9874] bridge0: left allmulticast mode [ 180.460921][ T9883] tipc: Can't bind to reserved service type 0 [ 180.684280][ T9893] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 180.711454][ T9895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1086'. [ 181.112855][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 181.186619][ T9919] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 181.330873][ T9928] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1096'. [ 181.412515][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 181.571979][ T9936] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 181.587940][ T9936] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 181.681583][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.707035][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.749636][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 182.742238][T10002] xt_TCPMSS: Only works on TCP SYN packets [ 182.757672][T10003] xt_TCPMSS: Only works on TCP SYN packets [ 182.833735][T10007] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.871628][T10007] __nla_validate_parse: 3 callbacks suppressed [ 182.871647][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 182.916232][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 183.402144][T10022] Cannot find del_set index 4 as target [ 183.630298][T10033] veth0: entered promiscuous mode [ 183.649028][T10032] veth0: left promiscuous mode [ 183.723968][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 183.863821][T10042] bond3: entered promiscuous mode [ 183.869583][T10042] bond3: entered allmulticast mode [ 183.875341][T10042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.146559][T10057] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1134'. [ 184.168857][T10057] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 184.206536][T10057] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 184.249802][T10060] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 185.704908][T10093] bond3: entered promiscuous mode [ 185.723907][T10093] bond3: entered allmulticast mode [ 185.734580][T10093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.219117][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 186.250595][T10111] validate_nla: 2 callbacks suppressed [ 186.250615][T10111] netlink: 'syz.0.1149': attribute type 8 has an invalid length. [ 186.442424][T10119] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 186.478186][T10119] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 186.703791][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 187.192176][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 187.215640][T10153] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1162'. [ 187.290691][T10153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1162'. [ 187.590735][T10169] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 188.252496][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 188.269268][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 188.282728][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 188.387077][T10201] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1173'. [ 188.567364][T10207] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 188.576922][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 188.677233][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 188.846359][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 188.852428][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 189.153371][T10237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1183'. [ 189.400826][T10245] netlink: 'syz.1.1185': attribute type 33 has an invalid length. [ 189.517196][T10252] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 189.528722][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 189.541980][T10252] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1186'. [ 189.563332][T10252] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 189.984455][ T9995] Set syz1 is full, maxelem 65536 reached [ 190.267056][ T7945] bond2: left allmulticast mode [ 190.285382][ T7945] bond2: left promiscuous mode [ 190.293331][ T7945] bridge0: port 1(bond2) entered disabled state [ 190.480546][T10285] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.657005][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 190.730791][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.743419][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.752244][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.762230][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.770356][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.033709][ T7945] bond0 (unregistering): Released all slaves [ 191.050070][ T7945] bond1 (unregistering): Released all slaves [ 191.165331][ T7945] bond2 (unregistering): Released all slaves [ 191.261245][ T7945] bond3 (unregistering): Released all slaves [ 191.276259][ T7945] bond4 (unregistering): Released all slaves [ 191.308661][T10297] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 191.313306][T10291] bond0: entered promiscuous mode [ 191.331434][T10291] bridge_slave_1: entered promiscuous mode [ 191.413121][T10291] bond0: left promiscuous mode [ 191.425640][T10291] bridge_slave_1: left promiscuous mode [ 191.480890][T10305] nftables ruleset with unbound chain [ 191.495853][T10301] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 191.498797][ T7945] : left promiscuous mode [ 191.715328][ T7945] IPVS: stopping master sync thread 6378 ... [ 192.746879][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 192.816926][ T5856] Bluetooth: hci3: command tx timeout [ 193.770153][T10349] __nla_validate_parse: 11 callbacks suppressed [ 193.770174][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 193.772837][T10350] sctp: [Deprecated]: syz.3.1215 (pid 10350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.772837][T10350] Use struct sctp_sack_info instead [ 193.804559][T10350] sctp: [Deprecated]: syz.3.1215 (pid 10350) Use of int in maxseg socket option. [ 193.804559][T10350] Use struct sctp_assoc_value instead [ 193.827790][T10350] sctp: [Deprecated]: syz.3.1215 (pid 10350) Use of int in maxseg socket option. [ 193.827790][T10350] Use struct sctp_assoc_value instead [ 193.854796][T10350] sctp: [Deprecated]: syz.3.1215 (pid 10350) Use of int in maxseg socket option. [ 193.854796][T10350] Use struct sctp_assoc_value instead [ 193.870031][T10350] sctp: [Deprecated]: syz.3.1215 (pid 10350) Use of int in maxseg socket option. [ 193.870031][T10350] Use struct sctp_assoc_value instead [ 193.941579][T10349] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1214'. [ 193.967956][ T7945] hsr_slave_0: left promiscuous mode [ 193.982452][ T7945] hsr_slave_1: left promiscuous mode [ 193.991442][T10349] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1214'. [ 194.055902][ T7945] pim6reg (unregistering): left allmulticast mode [ 194.830082][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 194.874479][T10292] chnl_net:caif_netlink_parms(): no params data found [ 194.896855][ T5856] Bluetooth: hci3: command tx timeout [ 195.349399][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.357001][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.364311][T10292] bridge_slave_0: entered allmulticast mode [ 195.398544][T10292] bridge_slave_0: entered promiscuous mode [ 195.430999][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.465278][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.491677][T10292] bridge_slave_1: entered allmulticast mode [ 195.516440][T10401] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1228'. [ 195.527640][T10292] bridge_slave_1: entered promiscuous mode [ 195.574330][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 195.639871][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.640507][T10401] netlink: 'syz.4.1228': attribute type 30 has an invalid length. [ 195.663331][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.683383][ T7945] IPVS: stop unused estimator thread 0... [ 195.697352][T10410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.787514][T10292] team0: Port device team_slave_0 added [ 195.839267][T10292] team0: Port device team_slave_1 added [ 195.918341][T10292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.929759][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.984639][T10421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.996509][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 196.006636][T10292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.055302][T10292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.071935][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.111994][T10292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.274633][T10292] hsr_slave_0: entered promiscuous mode [ 196.282038][T10292] hsr_slave_1: entered promiscuous mode [ 196.290454][T10428] xt_time: unknown flags 0x4 [ 196.296580][T10292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.312284][T10292] Cannot create hsr debugfs directory [ 196.450964][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 196.651663][T10448] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 196.669074][T10445] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 196.713835][T10454] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1244'. [ 196.880440][T10464] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 196.892593][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1246'. [ 196.908829][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 196.944657][T10464] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.974983][T10464] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.983530][ T5856] Bluetooth: hci3: command tx timeout [ 196.989189][T10464] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.004242][T10464] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 197.015404][T10464] team0: Failed to send options change via netlink (err -105) [ 197.026591][T10464] team0: Port device geneve0 added [ 197.040322][T10461] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.147899][T10461] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.156442][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 197.227187][T10461] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.349489][T10292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.399044][T10292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.420124][T10490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.455268][T10292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.507170][T10461] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.515822][T10292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.568537][T10461] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.636457][T10461] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.664891][T10461] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.708999][T10507] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 197.901420][T10292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.965234][T10292] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.999818][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.007079][ T7947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.023848][T10522] netlink: 'syz.4.1259': attribute type 4 has an invalid length. [ 198.039180][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.046396][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.406427][T10545] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 198.430010][T10545] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 198.653292][T10292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.708549][T10562] xt_l2tp: wrong L2TP version: 0 [ 198.715639][T10561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.780150][T10562] __nla_validate_parse: 9 callbacks suppressed [ 198.780173][T10562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1267'. [ 198.826473][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 198.977272][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 198.998048][T10292] veth0_vlan: entered promiscuous mode [ 199.025553][T10292] veth1_vlan: entered promiscuous mode [ 199.056942][ T5856] Bluetooth: hci3: command tx timeout [ 199.073370][T10292] veth0_macvtap: entered promiscuous mode [ 199.085562][T10292] veth1_macvtap: entered promiscuous mode [ 199.133417][T10292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.160577][T10292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.173179][T10292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.182282][T10292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.191119][T10292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.201852][T10292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.405280][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.415434][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.425743][T10581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1274'. [ 199.485549][ T7945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.525045][ T7945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.609084][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 200.027658][T10594] syz.2.1279 (10594) used greatest stack depth: 15960 bytes left [ 200.293882][T10618] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1289'. [ 200.358466][T10623] SET target dimension over the limit! [ 200.391690][T10621] 0ªX¹¦D: left allmulticast mode [ 200.617058][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'. [ 200.771740][T10621] bridge0: port 3(batadv0) entered disabled state [ 200.778719][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.786482][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.066890][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 201.411687][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.428541][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.439236][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.450190][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.458400][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.524467][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.943864][T10621] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 202.004959][T10621] veth0_macvtap: left allmulticast mode [ 202.012396][T10621] macvtap1: left allmulticast mode [ 202.032256][T10621] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.046171][T10621] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.055380][T10621] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.068837][T10621] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.099969][T10621] geneve2: left promiscuous mode [ 202.105000][T10621] geneve2: left allmulticast mode [ 202.338054][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 202.456472][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.506310][T10670] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 202.806516][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.931306][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.085813][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 203.137050][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 203.359193][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.403698][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 203.490142][T10706] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 203.511473][T10706] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 203.543455][ T5856] Bluetooth: hci3: command tx timeout [ 203.784925][T10644] chnl_net:caif_netlink_parms(): no params data found [ 204.066895][T10742] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 204.113089][ T1137] bridge_slave_1: left allmulticast mode [ 204.120560][T10743] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 204.128601][ T1137] bridge_slave_1: left promiscuous mode [ 204.150412][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.176185][ T1137] bridge_slave_0: left allmulticast mode [ 204.187524][T10752] IPVS: ip_vs_add_dest(): server weight less than zero [ 204.194557][ T1137] bridge_slave_0: left promiscuous mode [ 204.200355][T10648] IPVS: starting estimator thread 0... [ 204.206288][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.308208][T10753] IPVS: using max 28 ests per chain, 67200 per kthread [ 204.375013][T10758] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.843775][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.856550][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.872351][ T1137] bond0 (unregistering): Released all slaves [ 204.938172][T10742] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 204.945712][T10743] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 205.087341][T10777] erspan0: entered promiscuous mode [ 205.144055][T10777] erspan0: entered allmulticast mode [ 205.216774][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 205.455759][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.477151][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.484481][T10644] bridge_slave_0: entered allmulticast mode [ 205.510728][T10644] bridge_slave_0: entered promiscuous mode [ 205.542837][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.552424][T10803] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1324'. [ 205.567939][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.585375][T10644] bridge_slave_1: entered allmulticast mode [ 205.610045][T10644] bridge_slave_1: entered promiscuous mode [ 205.616921][ T5856] Bluetooth: hci3: command tx timeout [ 205.821457][T10803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.844883][T10803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.884111][T10803] bond0 (unregistering): (slave ip6erspan0): Releasing backup interface [ 205.904901][T10803] bond0 (unregistering): Released all slaves [ 206.107810][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.268319][ T1137] hsr_slave_0: left promiscuous mode [ 206.275089][ T1137] hsr_slave_1: left promiscuous mode [ 206.309134][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.320286][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.342431][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.372126][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.441582][ T1137] veth1_macvtap: left promiscuous mode [ 206.447738][ T1137] veth0_macvtap: left promiscuous mode [ 206.453488][ T1137] veth1_vlan: left promiscuous mode [ 206.464856][ T1137] veth0_vlan: left promiscuous mode [ 207.085521][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 207.124749][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 207.309517][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 207.556283][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.604408][T10865] team0: entered promiscuous mode [ 207.610379][T10865] team_slave_0: entered promiscuous mode [ 207.616347][T10865] team_slave_1: entered promiscuous mode [ 207.622657][T10865] geneve0: entered promiscuous mode [ 207.632790][T10867] team0: left promiscuous mode [ 207.639068][T10867] team_slave_0: left promiscuous mode [ 207.645760][T10867] team_slave_1: left promiscuous mode [ 207.651592][T10867] geneve0: left promiscuous mode [ 207.662079][T10872] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1336'. [ 207.688066][T10871] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1336'. [ 207.699478][ T5856] Bluetooth: hci3: command tx timeout [ 207.815290][T10644] team0: Port device team_slave_0 added [ 207.836871][T10877] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 207.867347][T10644] team0: Port device team_slave_1 added [ 207.981741][T10883] IPVS: length: 4096 != 8 [ 208.019502][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.037492][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.073623][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.153646][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 208.169789][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 208.246199][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 208.283764][T10893] team0 (unregistering): Port device team_slave_0 removed [ 208.292797][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 208.303905][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 208.316291][T10893] team0 (unregistering): Port device team_slave_1 removed [ 208.316847][T10901] netlink: 'syz.4.1346': attribute type 20 has an invalid length. [ 208.338701][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 208.364966][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.372520][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.398846][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.592397][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 208.635383][ T30] audit: type=1800 audit(1751871268.655:3): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1348" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1436 res=0 errno=0 [ 208.753254][T10644] hsr_slave_0: entered promiscuous mode [ 208.763018][T10644] hsr_slave_1: entered promiscuous mode [ 208.769834][T10644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.777816][T10644] Cannot create hsr debugfs directory [ 208.834127][T10918] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 209.325018][T10927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.333403][T10927] bridge0: port 1(bond5) entered blocking state [ 209.340378][T10927] bridge0: port 1(bond5) entered disabled state [ 209.348301][T10927] bond5: entered allmulticast mode [ 209.356210][T10927] bond5: entered promiscuous mode [ 209.376883][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 209.512627][T10644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.564944][T10644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.638651][T10644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.678848][T10644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.729962][T10942] syz_tun: entered allmulticast mode [ 209.737540][T10942] syz_tun: left allmulticast mode [ 209.776853][ T5856] Bluetooth: hci3: command tx timeout [ 210.076997][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.156328][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.221958][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.229221][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.276320][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.283609][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.750205][T10998] __nla_validate_parse: 7 callbacks suppressed [ 210.750332][T10998] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1374'. [ 210.812177][T10998] 0ªX¹¦D: renamed from gretap0 [ 210.847387][T10998] 0ªX¹¦D: entered allmulticast mode [ 210.855111][T10998] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 210.950664][T11004] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 211.005450][T11004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.048514][T11005] macvtap2: entered promiscuous mode [ 211.053869][T11005] bond2: entered promiscuous mode [ 211.067972][T11005] macvtap2: entered allmulticast mode [ 211.073483][T11005] bond2: entered allmulticast mode [ 211.081345][T11005] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 211.104988][T11004] bond2: (slave gretap1): making interface the new active one [ 211.115326][T11004] gretap1: entered promiscuous mode [ 211.120847][T11004] gretap1: entered allmulticast mode [ 211.134085][T11004] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 211.213199][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.264990][T10644] veth0_vlan: entered promiscuous mode [ 211.278396][T10644] veth1_vlan: entered promiscuous mode [ 211.312876][T10644] veth0_macvtap: entered promiscuous mode [ 211.323087][T10644] veth1_macvtap: entered promiscuous mode [ 211.342675][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.358290][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.372574][T10644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.382851][T10644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.393243][T10644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.402194][T10644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.458217][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 211.483482][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.491589][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.521164][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.532387][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.939384][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 212.375422][ T7946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.757895][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.767049][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.775145][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.783569][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.792888][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.979702][T11012] chnl_net:caif_netlink_parms(): no params data found [ 213.012549][ T7946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.095881][T11012] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.103366][T11012] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.111280][T11012] bridge_slave_0: entered allmulticast mode [ 213.118874][T11012] bridge_slave_0: entered promiscuous mode [ 213.127779][T11012] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.135000][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.146471][T11012] bridge_slave_1: entered allmulticast mode [ 213.153974][T11012] bridge_slave_1: entered promiscuous mode [ 213.192987][T11012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.205320][T11012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.249606][T11012] team0: Port device team_slave_0 added [ 213.259104][T11012] team0: Port device team_slave_1 added [ 213.294199][T11012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.301733][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.328336][T11012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.342582][T11012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.350179][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.378376][T11012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.429808][T11012] hsr_slave_0: entered promiscuous mode [ 213.436247][T11012] hsr_slave_1: entered promiscuous mode [ 213.442974][T11012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.450751][T11012] Cannot create hsr debugfs directory [ 213.533347][ T7946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.544555][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 213.644829][ T7946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.778125][ T7946] bridge_slave_1: left allmulticast mode [ 213.783856][ T7946] bridge_slave_1: left promiscuous mode [ 213.790174][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.800436][ T7946] bridge_slave_0: left allmulticast mode [ 213.806193][ T7946] bridge_slave_0: left promiscuous mode [ 213.812344][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.135590][ T7946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.150788][ T7946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.161923][ T7946] bond0 (unregistering): Released all slaves [ 214.413074][ T7946] hsr_slave_0: left promiscuous mode [ 214.419517][ T7946] hsr_slave_1: left promiscuous mode [ 214.425435][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.435234][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.443477][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.451803][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.476161][ T7946] veth1_macvtap: left promiscuous mode [ 214.482035][ T7946] veth0_macvtap: left promiscuous mode [ 214.488884][ T7946] veth1_vlan: left promiscuous mode [ 214.494230][ T7946] veth0_vlan: left promiscuous mode [ 214.827155][ T5168] Bluetooth: hci3: command tx timeout [ 214.972014][ T7946] team0 (unregistering): Port device team_slave_1 removed [ 215.021890][ T7946] team0 (unregistering): Port device team_slave_0 removed [ 215.469469][T11012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.486618][T11012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.498836][T11012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.509442][T11012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.626993][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 215.652580][T11012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.676440][T11012] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.691044][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.698340][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.726585][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.733853][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.935221][T11012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.989051][T11012] veth0_vlan: entered promiscuous mode [ 216.000597][T11012] veth1_vlan: entered promiscuous mode [ 216.030860][T11012] veth0_macvtap: entered promiscuous mode [ 216.041818][T11012] veth1_macvtap: entered promiscuous mode [ 216.061799][T11012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.081395][T11012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.093636][T11012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.103370][T11012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.112236][T11012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.122062][T11012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.193580][ T7943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.203204][ T7943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.230262][ T7943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.238617][ T7943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.698321][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 218.061584][ T7943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.804770][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.814453][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.823032][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.832640][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.841169][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.015921][T11031] chnl_net:caif_netlink_parms(): no params data found [ 219.100957][T11031] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.108557][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.115798][T11031] bridge_slave_0: entered allmulticast mode [ 219.123179][T11031] bridge_slave_0: entered promiscuous mode [ 219.132443][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.139954][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.148067][T11031] bridge_slave_1: entered allmulticast mode [ 219.155384][T11031] bridge_slave_1: entered promiscuous mode [ 219.190254][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.202499][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.242405][T11031] team0: Port device team_slave_0 added [ 219.251935][T11031] team0: Port device team_slave_1 added [ 219.285907][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.293542][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.319716][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.332759][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.340003][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.367196][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.422536][T11031] hsr_slave_0: entered promiscuous mode [ 219.429395][T11031] hsr_slave_1: entered promiscuous mode [ 219.435664][T11031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.443940][T11031] Cannot create hsr debugfs directory [ 219.717925][ T7943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.787729][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 219.798334][ T7943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.851819][ T7943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.953893][ T7943] bridge_slave_1: left allmulticast mode [ 219.959700][ T7943] bridge_slave_1: left promiscuous mode [ 219.965508][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.975303][ T7943] bridge_slave_0: left allmulticast mode [ 219.981392][ T7943] bridge_slave_0: left promiscuous mode [ 219.988765][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.332315][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.343714][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.354452][ T7943] bond0 (unregistering): Released all slaves [ 220.620404][ T7943] hsr_slave_0: left promiscuous mode [ 220.626495][ T7943] hsr_slave_1: left promiscuous mode [ 220.632589][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.640063][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.648308][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.655762][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.689404][ T7943] veth1_macvtap: left promiscuous mode [ 220.694966][ T7943] veth0_macvtap: left promiscuous mode [ 220.701025][ T7943] veth1_vlan: left promiscuous mode [ 220.706337][ T7943] veth0_vlan: left promiscuous mode [ 220.909103][ T5168] Bluetooth: hci3: command tx timeout [ 221.154306][ T7943] team0 (unregistering): Port device team_slave_1 removed [ 221.198723][ T7943] team0 (unregistering): Port device team_slave_0 removed [ 221.661698][T11031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.673412][T11031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.706093][T11031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.721194][T11031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.826516][T11031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.847111][T11031] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.856870][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 221.872300][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.879595][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.900391][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.907576][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.104609][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.151379][T11031] veth0_vlan: entered promiscuous mode [ 222.163903][T11031] veth1_vlan: entered promiscuous mode [ 222.195932][T11031] veth0_macvtap: entered promiscuous mode [ 222.206902][T11031] veth1_macvtap: entered promiscuous mode [ 222.228652][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.245310][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.258236][T11031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.268978][T11031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.278774][T11031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.289470][T11031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.360454][ T7944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.368889][ T7944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.395814][ T7945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.404858][ T7945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.937390][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 224.107932][ T7946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.972826][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.981838][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.991312][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.001219][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.009162][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.188842][T11050] chnl_net:caif_netlink_parms(): no params data found [ 225.279935][T11050] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.287519][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.294746][T11050] bridge_slave_0: entered allmulticast mode [ 225.302175][T11050] bridge_slave_0: entered promiscuous mode [ 225.311834][T11050] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.319402][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.326973][T11050] bridge_slave_1: entered allmulticast mode [ 225.334320][T11050] bridge_slave_1: entered promiscuous mode [ 225.372120][T11050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.384418][T11050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.428866][T11050] team0: Port device team_slave_0 added [ 225.437677][T11050] team0: Port device team_slave_1 added [ 225.473875][T11050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.481193][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.507624][T11050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.521331][T11050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.528384][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.555220][T11050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.605370][T11050] hsr_slave_0: entered promiscuous mode [ 225.612103][T11050] hsr_slave_1: entered promiscuous mode [ 225.619431][T11050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.627112][T11050] Cannot create hsr debugfs directory [ 225.835315][ T7946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.915330][ T7946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.974088][ T7946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.016885][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 226.098775][ T7946] bridge_slave_1: left allmulticast mode [ 226.104492][ T7946] bridge_slave_1: left promiscuous mode [ 226.110945][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.122479][ T7946] bridge_slave_0: left allmulticast mode [ 226.130410][ T7946] bridge_slave_0: left promiscuous mode [ 226.136179][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.487733][ T7946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.502424][ T7946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.513715][ T7946] bond0 (unregistering): Released all slaves [ 226.757892][ T7946] hsr_slave_0: left promiscuous mode [ 226.765261][ T7946] hsr_slave_1: left promiscuous mode [ 226.772584][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.781235][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.789587][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.797163][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.821809][ T7946] veth1_macvtap: left promiscuous mode [ 226.827567][ T7946] veth0_macvtap: left promiscuous mode [ 226.833202][ T7946] veth1_vlan: left promiscuous mode [ 226.838656][ T7946] veth0_vlan: left promiscuous mode [ 227.059540][ T5168] Bluetooth: hci3: command tx timeout [ 227.274587][ T7946] team0 (unregistering): Port device team_slave_1 removed [ 227.322393][ T7946] team0 (unregistering): Port device team_slave_0 removed [ 227.767263][T11050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.791277][T11050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.806238][T11050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.817891][T11050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.941309][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.967530][T11050] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.979988][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.987186][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.005270][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.012494][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.108498][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 228.244620][T11050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.294689][T11050] veth0_vlan: entered promiscuous mode [ 228.310293][T11050] veth1_vlan: entered promiscuous mode [ 228.342398][T11050] veth0_macvtap: entered promiscuous mode [ 228.353892][T11050] veth1_macvtap: entered promiscuous mode [ 228.374479][T11050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.391145][T11050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.403374][T11050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.413494][T11050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.423081][T11050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.431905][T11050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.499232][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.517852][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.544926][ T7946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.555341][ T7946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.176996][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 230.310459][ T7945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.298246][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.306477][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.315282][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.325520][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.334156][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.530667][T11069] chnl_net:caif_netlink_parms(): no params data found [ 231.618108][T11069] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.625330][T11069] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.633066][T11069] bridge_slave_0: entered allmulticast mode [ 231.641115][T11069] bridge_slave_0: entered promiscuous mode [ 231.649871][T11069] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.657766][T11069] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.664993][T11069] bridge_slave_1: entered allmulticast mode [ 231.672570][T11069] bridge_slave_1: entered promiscuous mode [ 231.709317][T11069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.722127][T11069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.765298][T11069] team0: Port device team_slave_0 added [ 231.774255][T11069] team0: Port device team_slave_1 added [ 231.807177][T11069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.814175][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.840297][T11069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.852525][T11069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.861354][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.887533][T11069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.925395][ T7945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.976473][T11069] hsr_slave_0: entered promiscuous mode [ 231.989876][T11069] hsr_slave_1: entered promiscuous mode [ 231.996226][T11069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.004332][T11069] Cannot create hsr debugfs directory [ 232.029221][ T7945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.108697][ T7945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.227238][ T7945] bridge_slave_1: left allmulticast mode [ 232.232969][ T7945] bridge_slave_1: left promiscuous mode [ 232.238894][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.251802][ T7945] bridge_slave_0: left allmulticast mode [ 232.258312][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 232.264410][ T7945] bridge_slave_0: left promiscuous mode [ 232.271177][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.600167][ T7945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.612561][ T7945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.622993][ T7945] bond0 (unregistering): Released all slaves [ 232.892899][ T7945] hsr_slave_0: left promiscuous mode [ 232.904025][ T7945] hsr_slave_1: left promiscuous mode [ 232.910872][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.918469][ T7945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.926447][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.935887][ T7945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.959284][ T7945] veth1_macvtap: left promiscuous mode [ 232.964853][ T7945] veth0_macvtap: left promiscuous mode [ 232.971599][ T7945] veth1_vlan: left promiscuous mode [ 232.977510][ T7945] veth0_vlan: left promiscuous mode [ 233.389540][ T5856] Bluetooth: hci3: command tx timeout [ 233.435476][ T7945] team0 (unregistering): Port device team_slave_1 removed [ 233.475753][ T7945] team0 (unregistering): Port device team_slave_0 removed [ 234.034811][T11069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.053047][T11069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.064217][T11069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.077905][T11069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.171397][T11069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.195362][T11069] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.210365][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.217550][ T7945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.235114][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.242380][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.341547][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 234.455749][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.504688][T11069] veth0_vlan: entered promiscuous mode [ 234.518932][T11069] veth1_vlan: entered promiscuous mode [ 234.548795][T11069] veth0_macvtap: entered promiscuous mode [ 234.561901][T11069] veth1_macvtap: entered promiscuous mode [ 234.580106][T11069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.592931][T11069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.612536][T11069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.621830][T11069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.631852][T11069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642720][T11069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.710506][ T7945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.723292][ T7945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.750175][ T7945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.758739][ T7945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.416932][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 236.510334][ T7943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.570258][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.579528][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.588294][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.599580][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.607621][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.787161][T11089] chnl_net:caif_netlink_parms(): no params data found [ 237.871394][T11089] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.878931][T11089] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.886176][T11089] bridge_slave_0: entered allmulticast mode [ 237.893737][T11089] bridge_slave_0: entered promiscuous mode [ 237.903286][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.910613][T11089] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.918574][T11089] bridge_slave_1: entered allmulticast mode [ 237.925952][T11089] bridge_slave_1: entered promiscuous mode [ 237.964891][T11089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.977719][T11089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.017510][ T7943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.049793][T11089] team0: Port device team_slave_0 added [ 238.061862][T11089] team0: Port device team_slave_1 added [ 238.104641][ T7943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.133711][T11089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.142323][T11089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.169130][T11089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.194155][ T7943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.210723][T11089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.218002][T11089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.244362][T11089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.302140][T11089] hsr_slave_0: entered promiscuous mode [ 238.309513][T11089] hsr_slave_1: entered promiscuous mode [ 238.316386][T11089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.324686][T11089] Cannot create hsr debugfs directory [ 238.431531][ T7943] bridge_slave_1: left allmulticast mode [ 238.437667][ T7943] bridge_slave_1: left promiscuous mode [ 238.443534][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.453533][ T7943] bridge_slave_0: left allmulticast mode [ 238.459831][ T7943] bridge_slave_0: left promiscuous mode [ 238.465568][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.496970][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 238.804953][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.816177][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.829779][ T7943] bond0 (unregistering): Released all slaves [ 239.133628][ T7943] hsr_slave_0: left promiscuous mode [ 239.146838][ T7943] hsr_slave_1: left promiscuous mode [ 239.152895][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.160878][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.169405][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.177137][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.198838][ T7943] veth1_macvtap: left promiscuous mode [ 239.204419][ T7943] veth0_macvtap: left promiscuous mode [ 239.210328][ T7943] veth1_vlan: left promiscuous mode [ 239.215700][ T7943] veth0_vlan: left promiscuous mode [ 239.661540][ T7943] team0 (unregistering): Port device team_slave_1 removed [ 239.701017][ T7943] team0 (unregistering): Port device team_slave_0 removed [ 239.708328][ T5856] Bluetooth: hci3: command tx timeout [ 240.174851][T11089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.186542][T11089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.208944][T11089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.225898][T11089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.353664][T11089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.377883][T11089] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.392936][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.400168][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.416111][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.423372][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.579103][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 240.633256][T11089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.681645][T11089] veth0_vlan: entered promiscuous mode [ 240.693424][T11089] veth1_vlan: entered promiscuous mode [ 240.725300][T11089] veth0_macvtap: entered promiscuous mode [ 240.736199][T11089] veth1_macvtap: entered promiscuous mode [ 240.759053][T11089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.775541][T11089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.789016][T11089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.799740][T11089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.808531][T11089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.817313][T11089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.885357][ T7922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.899194][ T7922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.923792][ T7945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.932072][ T7945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.581187][ T7943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.658721][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 243.757409][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.766221][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.775428][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.785300][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.795086][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.965487][T11108] chnl_net:caif_netlink_parms(): no params data found [ 244.049786][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.057111][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.064349][T11108] bridge_slave_0: entered allmulticast mode [ 244.072995][T11108] bridge_slave_0: entered promiscuous mode [ 244.102561][ T7943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.117469][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.124643][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.132032][T11108] bridge_slave_1: entered allmulticast mode [ 244.139438][T11108] bridge_slave_1: entered promiscuous mode [ 244.195031][ T7943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.216993][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.230131][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.264763][ T7943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.301646][T11108] team0: Port device team_slave_0 added [ 244.312486][T11108] team0: Port device team_slave_1 added [ 244.355222][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.364692][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.394076][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.410865][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.419494][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.447394][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.531377][T11108] hsr_slave_0: entered promiscuous mode [ 244.538306][T11108] hsr_slave_1: entered promiscuous mode [ 244.544520][T11108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.552183][T11108] Cannot create hsr debugfs directory [ 244.559648][ T7943] bridge_slave_1: left allmulticast mode [ 244.565349][ T7943] bridge_slave_1: left promiscuous mode [ 244.571276][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.581787][ T7943] bridge_slave_0: left allmulticast mode [ 244.587792][ T7943] bridge_slave_0: left promiscuous mode [ 244.593536][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.753220][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 244.957182][ T7943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.969683][ T7943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.980514][ T7943] bond0 (unregistering): Released all slaves [ 245.244704][ T7943] hsr_slave_0: left promiscuous mode [ 245.250791][ T7943] hsr_slave_1: left promiscuous mode [ 245.263583][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.271290][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.279435][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.288102][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.308070][ T7943] veth1_macvtap: left promiscuous mode [ 245.313659][ T7943] veth0_macvtap: left promiscuous mode [ 245.319405][ T7943] veth1_vlan: left promiscuous mode [ 245.324715][ T7943] veth0_vlan: left promiscuous mode [ 245.773193][ T7943] team0 (unregistering): Port device team_slave_1 removed [ 245.812472][ T7943] team0 (unregistering): Port device team_slave_0 removed [ 245.858849][ T5856] Bluetooth: hci3: command tx timeout [ 246.522410][T11108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.583883][T11108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.586526][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 246.623628][T11124] xt_nat: multiple ranges no longer supported [ 246.669652][T11108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.732917][T11108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.771604][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.818325][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 246.831329][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1381'. [ 246.865791][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 246.910759][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1381'. [ 246.934053][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1381'. [ 246.940627][T11108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.002351][T11108] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.015860][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.023159][ T7943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.102386][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.109649][ T7947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.416408][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'. [ 247.432570][T11170] x_tables: duplicate underflow at hook 1 [ 247.723307][T11191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1392'. [ 247.767701][T11191] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 247.800360][T11191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.811132][T11193] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 247.819261][T11193] netlink: 'syz.3.1393': attribute type 2 has an invalid length. [ 247.828552][T11195] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 247.863470][T11195] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 247.867829][T11108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.937045][ T5856] Bluetooth: hci3: command tx timeout [ 247.975087][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 247.980427][T11203] netlink: 'syz.2.1396': attribute type 32 has an invalid length. [ 248.033353][T11108] veth0_vlan: entered promiscuous mode [ 248.075927][T11108] veth1_vlan: entered promiscuous mode [ 248.179988][T11108] veth0_macvtap: entered promiscuous mode [ 248.195109][T11108] veth1_macvtap: entered promiscuous mode [ 248.245104][T11208] netlink: 'syz.0.1397': attribute type 75 has an invalid length. [ 248.292528][T11108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.342100][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 248.421145][T11108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.462406][T11108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.483712][T11108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.522980][T11108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.536878][T11108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.568753][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 248.798631][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.825412][T11242] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 248.901857][ T7943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.916066][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 248.923211][ T7943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.132033][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.171402][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.718107][T11303] netlink: 'syz.3.1422': attribute type 7 has an invalid length. [ 249.768045][T11304] syzkaller1: entered promiscuous mode [ 249.773662][T11304] syzkaller1: entered allmulticast mode [ 249.915746][T11314] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 249.984941][T11316] syzkaller0: entered promiscuous mode [ 250.007355][T11316] syzkaller0: entered allmulticast mode [ 250.078544][T11319] netlink: 'syz.2.1427': attribute type 20 has an invalid length. [ 250.372053][ T7922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.635224][ T7922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.695478][ T7922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.791139][ T7922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.886206][ T7922] bridge_slave_1: left allmulticast mode [ 250.892082][ T7922] bridge_slave_1: left promiscuous mode [ 250.898947][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.909192][ T7922] bridge_slave_0: left allmulticast mode [ 250.914864][ T7922] bridge_slave_0: left promiscuous mode [ 250.920934][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.980372][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 251.235680][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.247375][ T7922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.258308][ T7922] bond0 (unregistering): Released all slaves [ 251.492517][T11345] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 251.554703][T11351] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 251.681832][T11350] syzkaller0: entered promiscuous mode [ 251.693048][T11350] syzkaller0: entered allmulticast mode [ 251.856901][ T7922] hsr_slave_0: left promiscuous mode [ 251.863374][ T7922] hsr_slave_1: left promiscuous mode [ 251.870085][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.886894][ T7922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.901977][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.911878][ T7922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.964391][ T7922] veth1_macvtap: left promiscuous mode [ 251.980406][ T7922] veth0_macvtap: left promiscuous mode [ 251.991223][ T7922] veth1_vlan: left promiscuous mode [ 252.006281][ T7922] veth0_vlan: left promiscuous mode [ 252.016130][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.025904][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.035117][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.049598][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.059121][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.242617][T11377] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.369429][T11380] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 252.377843][T11380] __nla_validate_parse: 6 callbacks suppressed [ 252.377861][T11380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1446'. [ 252.623584][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 252.664849][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 253.067076][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 253.219863][T11385] netlink: 'syz.3.1448': attribute type 21 has an invalid length. [ 253.487959][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.097937][ T5168] Bluetooth: hci3: command tx timeout [ 254.599918][T11378] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1446'. [ 254.609382][T11378] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1446'. [ 254.619891][T11380] wlan1: mtu less than device minimum [ 254.652043][T11385] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1448'. [ 254.811621][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'. [ 254.821975][T11404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1453'. [ 254.880121][T11405] macvlan2: entered promiscuous mode [ 254.885703][T11405] macvlan2: entered allmulticast mode [ 255.138927][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 255.159066][ T7947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.204558][ T7947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.285732][T11369] chnl_net:caif_netlink_parms(): no params data found [ 255.402942][T11432] netlink: 'syz.0.1460': attribute type 13 has an invalid length. [ 255.412292][T11434] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1461'. [ 255.421657][T11434] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1461'. [ 255.440826][T11432] veth1_vlan: mtu less than device minimum [ 255.577256][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.585077][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.612271][T11369] bridge_slave_0: entered allmulticast mode [ 255.620758][T11369] bridge_slave_0: entered promiscuous mode [ 255.637008][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.645773][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.653268][T11369] bridge_slave_1: entered allmulticast mode [ 255.661526][T11369] bridge_slave_1: entered promiscuous mode [ 255.738248][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.858404][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.869907][T11455] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.956931][T11369] team0: Port device team_slave_0 added [ 255.965582][T11369] team0: Port device team_slave_1 added [ 256.055298][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.072709][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.108804][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.136462][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.145320][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.177441][ T5168] Bluetooth: hci3: command tx timeout [ 256.186788][T11473] xt_bpf: check failed: parse error [ 256.214386][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.434029][T11369] hsr_slave_0: entered promiscuous mode [ 256.453707][T11369] hsr_slave_1: entered promiscuous mode [ 256.472310][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.490645][T11369] Cannot create hsr debugfs directory [ 256.506597][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 256.546901][T11479] tipc: Enabling of bearer rejected, failed to enable media [ 256.638675][T11481] netlink: set zone limit has 8 unknown bytes [ 256.658257][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 257.114294][T11505] sit0: entered promiscuous mode [ 257.132434][T11505] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 257.217005][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 257.330164][T11511] netlink: 'syz.4.1483': attribute type 10 has an invalid length. [ 257.431074][T11516] vlan2: entered promiscuous mode [ 257.436204][T11516] bridge0: entered promiscuous mode [ 257.761249][T11535] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 257.800632][T11535] __nla_validate_parse: 3 callbacks suppressed [ 257.800654][T11535] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1490'. [ 257.820321][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 257.836878][T11369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.871152][T11369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.901096][T11369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.932788][T11369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.014624][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 258.109491][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 258.253786][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.261811][T11572] netlink: 'syz.0.1499': attribute type 21 has an invalid length. [ 258.270050][ T5168] Bluetooth: hci3: command tx timeout [ 258.286385][T11572] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1499'. [ 258.304441][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.319116][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.326375][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.363663][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.370961][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.548367][T11581] tun0: tun_chr_ioctl cmd 1074025675 [ 258.564048][T11581] tun0: persist disabled [ 258.969811][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.044423][T11369] veth0_vlan: entered promiscuous mode [ 259.083789][T11369] veth1_vlan: entered promiscuous mode [ 259.168670][T11369] veth0_macvtap: entered promiscuous mode [ 259.190319][T11369] veth1_macvtap: entered promiscuous mode [ 259.228084][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.270291][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.279628][T11614] netlink: 'syz.4.1512': attribute type 10 has an invalid length. [ 259.298913][ T5168] Bluetooth: hci2: command 0x0401 tx timeout [ 259.484964][T11622] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1516'. [ 259.520175][T11624] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 259.523297][T11369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.546611][T11369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.555629][T11369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.565117][T11369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.768974][ T7946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.806766][ T7946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.889938][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 259.914829][T11641] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1520'. [ 259.915783][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.958048][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.094601][T11645] 0ªX¹¦D: left allmulticast mode [ 260.168953][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.185114][T11645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.384313][T11663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.764140][T11685] xt_HMARK: proto mask must be zero with L3 mode [ 261.175078][ T7922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.773077][ T7922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.854710][ T7922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.912551][ T7922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.007154][ T7922] bridge_slave_1: left allmulticast mode [ 262.012847][ T7922] bridge_slave_1: left promiscuous mode [ 262.019219][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.030352][ T7922] bridge_slave_0: left allmulticast mode [ 262.036057][ T7922] bridge_slave_0: left promiscuous mode [ 262.041886][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.324192][T11696] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 262.685341][T11717] netlink: 'syz.0.1541': attribute type 11 has an invalid length. [ 262.714770][T11717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1541'. [ 262.746913][T11720] x_tables: duplicate underflow at hook 1 [ 262.765186][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.788292][ T7922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.810613][ T7922] bond0 (unregistering): Released all slaves [ 262.885272][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.895609][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.904625][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.914649][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.922557][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.178394][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 263.216625][T11740] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 263.235194][T11740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1545'. [ 263.286863][T11740] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 263.490098][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 263.534712][T11750] openvswitch: netlink: Flow key attr not present in new flow. [ 263.657481][ T7922] hsr_slave_0: left promiscuous mode [ 263.698956][ T7922] hsr_slave_1: left promiscuous mode [ 263.705761][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.717700][ T7922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.726837][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.735708][ T7922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.765575][T11755] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1551'. [ 263.773919][ T7922] veth1_macvtap: left promiscuous mode [ 263.781128][ T7922] veth0_macvtap: left promiscuous mode [ 263.787401][ T7922] veth1_vlan: left promiscuous mode [ 263.794312][ T7922] veth0_vlan: left promiscuous mode [ 263.809960][T11761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 264.328683][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 264.372642][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 264.977141][ T5168] Bluetooth: hci3: command tx timeout [ 265.054368][T11772] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 265.270339][T11726] chnl_net:caif_netlink_parms(): no params data found [ 265.398253][T11785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.781633][T11803] tipc: Enabled bearer , priority 10 [ 265.791746][T11726] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.809284][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.825511][T11726] bridge_slave_0: entered allmulticast mode [ 265.832797][T11803] xt_TCPMSS: Only works on TCP SYN packets [ 265.852424][T11726] bridge_slave_0: entered promiscuous mode [ 265.883818][T11726] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.896371][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.915213][T11726] bridge_slave_1: entered allmulticast mode [ 265.935894][T11726] bridge_slave_1: entered promiscuous mode [ 266.096420][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.120630][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.317309][T11726] team0: Port device team_slave_0 added [ 266.322233][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 266.347135][T11726] team0: Port device team_slave_1 added [ 266.361579][T11830] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 266.479961][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 266.497724][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.515125][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.545635][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.605563][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.619844][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.671778][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.776291][T11824] infiniband syz0: set down [ 266.777827][T11850] netlink: 'syz.0.1577': attribute type 2 has an invalid length. [ 266.806837][T11824] infiniband syz0: added ipvlan1 [ 266.810953][T11850] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 266.853315][T11726] hsr_slave_0: entered promiscuous mode [ 266.871698][T11854] netlink: 'syz.2.1578': attribute type 13 has an invalid length. [ 266.878293][T11726] hsr_slave_1: entered promiscuous mode [ 266.888615][T11726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.894462][T11854] netlink: 'syz.2.1578': attribute type 58 has an invalid length. [ 266.896215][T11726] Cannot create hsr debugfs directory [ 266.953860][T11854] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1578'. [ 267.023074][T11824] RDS/IB: syz0: added [ 267.035628][T11824] smc: adding ib device syz0 with port count 1 [ 267.047082][T11824] smc: ib device syz0 port 1 has pnetid [ 267.057441][ T5168] Bluetooth: hci3: command tx timeout [ 267.312997][T11869] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 267.422545][T11872] team0: Device vti0 is of different type [ 268.281777][T11726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.303066][T11726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.316455][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 268.344173][T11726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.381730][T11726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.683693][T11726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.750542][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.821677][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.827132][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 268.828935][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.883657][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.890935][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.137600][ T5168] Bluetooth: hci3: command tx timeout [ 269.427324][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 269.461443][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 269.573289][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 269.643840][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.700776][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 269.762296][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 269.762337][T11942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1602'. [ 269.817847][T11726] veth0_vlan: entered promiscuous mode [ 269.832389][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 269.844937][T11726] veth1_vlan: entered promiscuous mode [ 269.935983][T11726] veth0_macvtap: entered promiscuous mode [ 269.959743][T11726] veth1_macvtap: entered promiscuous mode [ 270.003040][T11726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.046237][T11726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.078411][T11726] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.092996][T11726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.103333][T11726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.116174][T11726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.316431][ T7944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.334599][ T7944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.415954][ T7943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.440332][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 270.441693][ T7943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.758481][T11981] tun1: tun_chr_ioctl cmd 1074025675 [ 270.771958][T11981] tun1: persist disabled [ 270.827664][T11987] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 271.125855][T12001] bond3: entered promiscuous mode [ 271.132626][T12001] bond3: entered allmulticast mode [ 271.139381][T12001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.175715][T12009] x_tables: duplicate underflow at hook 1 [ 271.440311][T12001] bond3 (unregistering): Released all slaves [ 271.634470][ T7945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.722180][ T7945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.233799][ T7945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.351492][ T7945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.450655][ T7945] bridge_slave_1: left allmulticast mode [ 272.456337][ T7945] bridge_slave_1: left promiscuous mode [ 272.462668][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.472151][ T7945] bridge_slave_0: left allmulticast mode [ 272.478147][ T7945] bridge_slave_0: left promiscuous mode [ 272.483917][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.138949][ T7945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.162897][ T7945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.186877][ T7945] bond0 (unregistering): Released all slaves [ 273.286218][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.310847][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.319482][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.357041][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.373132][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.436080][T12051] __nla_validate_parse: 4 callbacks suppressed [ 273.436179][T12051] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1631'. [ 273.550359][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 273.649463][T12067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.894578][T12077] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 273.940719][T12078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1637'. [ 273.952212][T12077] netlink: 'syz.2.1638': attribute type 11 has an invalid length. [ 273.971964][T12077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1638'. [ 274.189424][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1642'. [ 274.608156][T12119] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1646'. [ 274.745238][T12129] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1648'. [ 274.755279][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 274.768123][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1648'. [ 274.806996][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 274.963429][T12124] xt_CT: No such helper "snmp" [ 275.093609][T12141] 8021q: VLANs not supported on ip6gre0 [ 275.116898][ T7945] hsr_slave_0: left promiscuous mode [ 275.125070][ T7945] hsr_slave_1: left promiscuous mode [ 275.138472][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.156227][ T7945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.180185][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.189764][ T7945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.243749][ T7945] veth1_macvtap: left promiscuous mode [ 275.262719][ T7945] veth0_macvtap: left promiscuous mode [ 275.268587][ T7945] veth1_vlan: left promiscuous mode [ 275.274163][ T7945] veth0_vlan: left promiscuous mode [ 275.460102][ T5846] Bluetooth: hci3: command tx timeout [ 275.933894][ T7945] team0 (unregistering): Port device team_slave_1 removed [ 275.982665][ T7945] team0 (unregistering): Port device team_slave_0 removed [ 276.509595][T12048] chnl_net:caif_netlink_parms(): no params data found [ 276.788487][T12189] bond0: entered promiscuous mode [ 276.792579][T12194] Bluetooth: MGMT ver 1.23 [ 276.793820][T12189] bridge_slave_1: entered promiscuous mode [ 276.804639][T12189] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 276.821113][T12189] bond0: left promiscuous mode [ 276.826113][T12189] bridge_slave_1: left promiscuous mode [ 276.841716][T12189] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 276.904087][T12183] : renamed from hsr0 (while UP) [ 277.028171][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.035671][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.043052][T12048] bridge_slave_0: entered allmulticast mode [ 277.051176][T12048] bridge_slave_0: entered promiscuous mode [ 277.072837][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.085534][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.096536][T12048] bridge_slave_1: entered allmulticast mode [ 277.105226][T12048] bridge_slave_1: entered promiscuous mode [ 277.314819][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.340340][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.536985][ T5846] Bluetooth: hci3: command tx timeout [ 277.550905][T12048] team0: Port device team_slave_0 added [ 277.601130][T12048] team0: Port device team_slave_1 added [ 277.754200][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.766934][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.827279][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.890521][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.920659][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.952559][T12247] can: request_module (can-proto-5) failed. [ 277.978463][T12255] x_tables: duplicate underflow at hook 1 [ 277.995846][T12255] Unsupported ieee802154 address type: 0 [ 278.002434][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.183961][T12048] hsr_slave_0: entered promiscuous mode [ 278.197947][T12048] hsr_slave_1: entered promiscuous mode [ 278.598842][T12283] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 278.843283][T12293] __nla_validate_parse: 5 callbacks suppressed [ 278.843305][T12293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1696'. [ 279.187726][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1701'. [ 279.216214][T12312] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1701'. [ 279.432653][T12048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.461333][T12048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.485917][T12048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.513230][T12048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.555219][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 279.618666][ T5846] Bluetooth: hci3: command tx timeout [ 279.742855][T12048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.803651][T12344] block nbd0: Unsupported socket: shutdown callout must be supported. [ 279.839510][T12048] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.875351][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.882640][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.922720][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.930034][ T7922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.039932][T12351] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 280.066856][T12351] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 280.366248][T12358] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 280.654962][T12048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.823777][T12048] veth0_vlan: entered promiscuous mode [ 280.848877][T12048] veth1_vlan: entered promiscuous mode [ 280.914706][T12048] veth0_macvtap: entered promiscuous mode [ 280.951768][T12048] veth1_macvtap: entered promiscuous mode [ 281.002365][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.029871][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.047449][T12048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.061387][T12048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.071242][T12048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.099787][T12048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.122933][T12379] tipc: Trying to set illegal importance in message [ 281.195176][T12361] infiniband syz!: set down [ 281.201531][T12361] infiniband syz!: added team_slave_0 [ 281.211732][T12361] syz!: rxe_create_cq: returned err = -12 [ 281.223498][T12361] infiniband syz!: Couldn't create ib_mad CQ [ 281.239816][T12361] infiniband syz!: Couldn't open port 1 [ 281.300915][T12361] RDS/IB: syz!: added [ 281.305202][T12361] smc: adding ib device syz! with port count 1 [ 281.342049][T12361] smc: ib device syz! port 1 has pnetid [ 281.370221][ T7946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.403925][ T7946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.454619][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.480786][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.490547][T12387] No such timeout policy "syz0" [ 281.490547][T12389] No such timeout policy "syz0" [ 281.696785][ C0] ------------[ cut here ]------------ [ 281.703037][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 281.709844][ C0] WARNING: CPU: 0 PID: 12361 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 281.719030][ C0] Modules linked in: [ 281.723179][ C0] CPU: 0 UID: 0 PID: 12361 Comm: syz.4.1712 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 281.735262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.745376][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 281.750707][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0e 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 281.770346][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 281.776440][ C0] RAX: 130daed70c4ec900 RBX: 0000000000000100 RCX: ffff888032f63c00 [ 281.784438][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 281.792423][ C0] RBP: 1ffff110038f0338 R08: 0000000000000003 R09: 0000000000000004 [ 281.800430][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: dffffc0000000000 [ 281.808419][ C0] R13: ffff888056a18988 R14: 0000000000000008 R15: ffff88801c781978 [ 281.816440][ C0] FS: 00007f00a864d6c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 281.825392][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.831991][ C0] CR2: 00002000000034c0 CR3: 0000000051862000 CR4: 00000000003526f0 [ 281.839989][ C0] Call Trace: [ 281.843287][ C0] [ 281.846155][ C0] call_timer_fn+0x17e/0x5f0 [ 281.850769][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.856614][ C0] ? call_timer_fn+0xbe/0x5f0 [ 281.861321][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 281.866458][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 281.871704][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.877534][ C0] __run_timer_base+0x646/0x860 [ 281.882413][ C0] ? ktime_get+0x3e/0x1f0 [ 281.886796][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 281.892191][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 281.898473][ C0] run_timer_softirq+0xb7/0x180 [ 281.903354][ C0] handle_softirqs+0x286/0x870 [ 281.908141][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 281.912934][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 281.918271][ C0] __irq_exit_rcu+0xca/0x1f0 [ 281.922886][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 281.928116][ C0] irq_exit_rcu+0x9/0x30 [ 281.932383][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.938059][ C0] [ 281.941007][ C0] [ 281.943961][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.949965][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 281.955274][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b fd 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 281.974906][ C0] RSP: 0018:ffffc9000b0f66c8 EFLAGS: 00000206 [ 281.980999][ C0] RAX: 130daed70c4ec900 RBX: 0000000000000000 RCX: 130daed70c4ec900 [ 281.988990][ C0] RDX: 0000000000000000 RSI: ffffffff8db84710 RDI: ffffffff8be28f80 [ 281.996989][ C0] RBP: ffffffff825d8c5c R08: 0000000000000000 R09: ffffffff825d8c5c [ 282.004990][ C0] R10: dffffc0000000000 R11: ffffed100365fe25 R12: 0000000000000002 [ 282.012978][ C0] R13: ffffffff8e13ee20 R14: 0000000000000000 R15: 0000000000000246 [ 282.021060][ C0] ? kernfs_root+0x1c/0x230 [ 282.025601][ C0] ? kernfs_root+0x1c/0x230 [ 282.030149][ C0] ? kernfs_root+0x1c/0x230 [ 282.034681][ C0] kernfs_root+0x38/0x230 [ 282.039310][ C0] ? kernfs_root+0x1c/0x230 [ 282.043841][ C0] kernfs_link_sibling+0xe6/0x3e0 [ 282.048905][ C0] kernfs_add_one+0x1e0/0x520 [ 282.053618][ C0] __kernfs_create_file+0x22b/0x2e0 [ 282.058848][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 282.064247][ C0] internal_create_group+0x66d/0x1110 [ 282.069653][ C0] ? kobject_add+0x155/0x220 [ 282.074265][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 282.080102][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.084897][ C0] sysfs_create_groups+0x59/0x120 [ 282.089951][ C0] ib_setup_port_attrs+0x1407/0x2070 [ 282.095286][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 282.100944][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.106342][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.112357][ C0] ? device_add+0x70b/0xb50 [ 282.116894][ C0] add_one_compat_dev+0x3d6/0x5c0 [ 282.121941][ C0] enable_device_and_get+0x2a7/0x3d0 [ 282.127251][ C0] ? __pfx_enable_device_and_get+0x10/0x10 [ 282.133091][ C0] ? device_add+0x70b/0xb50 [ 282.137623][ C0] ib_register_device+0x10c3/0x1380 [ 282.142864][ C0] ? __pfx_ib_register_device+0x10/0x10 [ 282.148438][ C0] ? xas_start+0x3d4/0x770 [ 282.152883][ C0] ? xa_load+0x60/0x210 [ 282.157057][ C0] ? xa_load+0x60/0x210 [ 282.161227][ C0] ? xa_load+0x60/0x210 [ 282.165397][ C0] ? xa_load+0x1ea/0x210 [ 282.169663][ C0] ? ib_device_set_netdev+0x5c9/0x6d0 [ 282.175068][ C0] rxe_register_device+0x1ef/0x310 [ 282.180204][ C0] rxe_net_add+0x7a/0x100 [ 282.184553][ C0] rxe_newlink+0xdd/0x190 [ 282.188904][ C0] nldev_newlink+0x4a5/0x5a0 [ 282.193523][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 282.198758][ C0] ? aa_get_newest_label+0xf7/0x5d0 [ 282.203992][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 282.209651][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 282.215324][ C0] ? bpf_lsm_capable+0x9/0x20 [ 282.220033][ C0] ? security_capable+0x7e/0x2e0 [ 282.224995][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 282.230131][ C0] rdma_nl_rcv+0x6ae/0x980 [ 282.234696][ C0] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 282.239663][ C0] ? __lock_acquire+0xab9/0xd20 [ 282.244562][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.249834][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.255064][ C0] netlink_unicast+0x758/0x8d0 [ 282.259861][ C0] netlink_sendmsg+0x805/0xb30 [ 282.264658][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.269965][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 282.274928][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.280232][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.285537][ C0] __sock_sendmsg+0x219/0x270 [ 282.290324][ C0] ____sys_sendmsg+0x505/0x830 [ 282.295130][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.300450][ C0] ? import_iovec+0x74/0xa0 [ 282.304977][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 282.309683][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.314939][ C0] ? __fget_files+0x2a/0x420 [ 282.319557][ C0] ? __fget_files+0x3a0/0x420 [ 282.324277][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 282.329246][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.334779][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.339573][ C0] ? do_syscall_64+0xbe/0x3b0 [ 282.344277][ C0] do_syscall_64+0xfa/0x3b0 [ 282.348816][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.354049][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.360138][ C0] ? clear_bhb_loop+0x60/0xb0 [ 282.364838][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.370835][ C0] RIP: 0033:0x7f00a778e929 [ 282.375280][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.394920][ C0] RSP: 002b:00007f00a864d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.403367][ C0] RAX: ffffffffffffffda RBX: 00007f00a79b5fa0 RCX: 00007f00a778e929 [ 282.411355][ C0] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000004 [ 282.419343][ C0] RBP: 00007f00a7810b39 R08: 0000000000000000 R09: 0000000000000000 [ 282.427327][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.435312][ C0] R13: 0000000000000000 R14: 00007f00a79b5fa0 R15: 00007ffcf35f9568 [ 282.443355][ C0] [ 282.446413][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.453730][ C0] CPU: 0 UID: 0 PID: 12361 Comm: syz.4.1712 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 282.465817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.475980][ C0] Call Trace: [ 282.479283][ C0] [ 282.482161][ C0] dump_stack_lvl+0x99/0x250 [ 282.486777][ C0] ? __asan_memcpy+0x40/0x70 [ 282.491392][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.496610][ C0] ? __pfx__printk+0x10/0x10 [ 282.501241][ C0] panic+0x2db/0x790 [ 282.505249][ C0] ? __pfx_panic+0x10/0x10 [ 282.509695][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 282.514929][ C0] __warn+0x31b/0x4b0 [ 282.518931][ C0] ? __queue_work+0xd62/0xfe0 [ 282.523635][ C0] ? __queue_work+0xd62/0xfe0 [ 282.528333][ C0] report_bug+0x2be/0x4f0 [ 282.532691][ C0] ? __queue_work+0xd62/0xfe0 [ 282.537388][ C0] ? __queue_work+0xd62/0xfe0 [ 282.542084][ C0] ? __queue_work+0xd64/0xfe0 [ 282.546793][ C0] handle_bug+0x84/0x160 [ 282.551072][ C0] exc_invalid_op+0x1a/0x50 [ 282.555597][ C0] asm_exc_invalid_op+0x1a/0x20 [ 282.560465][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 282.565779][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 79 0e 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 282.585422][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 282.591525][ C0] RAX: 130daed70c4ec900 RBX: 0000000000000100 RCX: ffff888032f63c00 [ 282.599563][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 282.607563][ C0] RBP: 1ffff110038f0338 R08: 0000000000000003 R09: 0000000000000004 [ 282.615556][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: dffffc0000000000 [ 282.623544][ C0] R13: ffff888056a18988 R14: 0000000000000008 R15: ffff88801c781978 [ 282.631552][ C0] ? __queue_work+0xd61/0xfe0 [ 282.636380][ C0] call_timer_fn+0x17e/0x5f0 [ 282.640989][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 282.646822][ C0] ? call_timer_fn+0xbe/0x5f0 [ 282.651532][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 282.656710][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 282.661951][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 282.667786][ C0] __run_timer_base+0x646/0x860 [ 282.672695][ C0] ? ktime_get+0x3e/0x1f0 [ 282.677068][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 282.682459][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 282.688738][ C0] run_timer_softirq+0xb7/0x180 [ 282.693613][ C0] handle_softirqs+0x286/0x870 [ 282.698533][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 282.703356][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 282.708685][ C0] __irq_exit_rcu+0xca/0x1f0 [ 282.713303][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 282.718529][ C0] irq_exit_rcu+0x9/0x30 [ 282.722800][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 282.728486][ C0] [ 282.731429][ C0] [ 282.734373][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.740369][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 282.745695][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b fd 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 282.765339][ C0] RSP: 0018:ffffc9000b0f66c8 EFLAGS: 00000206 [ 282.771430][ C0] RAX: 130daed70c4ec900 RBX: 0000000000000000 RCX: 130daed70c4ec900 [ 282.779417][ C0] RDX: 0000000000000000 RSI: ffffffff8db84710 RDI: ffffffff8be28f80 [ 282.787494][ C0] RBP: ffffffff825d8c5c R08: 0000000000000000 R09: ffffffff825d8c5c [ 282.795488][ C0] R10: dffffc0000000000 R11: ffffed100365fe25 R12: 0000000000000002 [ 282.803562][ C0] R13: ffffffff8e13ee20 R14: 0000000000000000 R15: 0000000000000246 [ 282.811558][ C0] ? kernfs_root+0x1c/0x230 [ 282.816112][ C0] ? kernfs_root+0x1c/0x230 [ 282.820671][ C0] ? kernfs_root+0x1c/0x230 [ 282.825287][ C0] kernfs_root+0x38/0x230 [ 282.829664][ C0] ? kernfs_root+0x1c/0x230 [ 282.834198][ C0] kernfs_link_sibling+0xe6/0x3e0 [ 282.839266][ C0] kernfs_add_one+0x1e0/0x520 [ 282.843975][ C0] __kernfs_create_file+0x22b/0x2e0 [ 282.849201][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 282.854607][ C0] internal_create_group+0x66d/0x1110 [ 282.860023][ C0] ? kobject_add+0x155/0x220 [ 282.864640][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 282.870475][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.875795][ C0] sysfs_create_groups+0x59/0x120 [ 282.880848][ C0] ib_setup_port_attrs+0x1407/0x2070 [ 282.886176][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 282.891834][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.897228][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.903246][ C0] ? device_add+0x70b/0xb50 [ 282.907796][ C0] add_one_compat_dev+0x3d6/0x5c0 [ 282.912844][ C0] enable_device_and_get+0x2a7/0x3d0 [ 282.918154][ C0] ? __pfx_enable_device_and_get+0x10/0x10 [ 282.923994][ C0] ? device_add+0x70b/0xb50 [ 282.928521][ C0] ib_register_device+0x10c3/0x1380 [ 282.933754][ C0] ? __pfx_ib_register_device+0x10/0x10 [ 282.939444][ C0] ? xas_start+0x3d4/0x770 [ 282.943888][ C0] ? xa_load+0x60/0x210 [ 282.948068][ C0] ? xa_load+0x60/0x210 [ 282.952243][ C0] ? xa_load+0x60/0x210 [ 282.956425][ C0] ? xa_load+0x1ea/0x210 [ 282.960706][ C0] ? ib_device_set_netdev+0x5c9/0x6d0 [ 282.966106][ C0] rxe_register_device+0x1ef/0x310 [ 282.971244][ C0] rxe_net_add+0x7a/0x100 [ 282.975594][ C0] rxe_newlink+0xdd/0x190 [ 282.979943][ C0] nldev_newlink+0x4a5/0x5a0 [ 282.984560][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 282.989770][ C0] ? aa_get_newest_label+0xf7/0x5d0 [ 282.994991][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 283.000657][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 283.006336][ C0] ? bpf_lsm_capable+0x9/0x20 [ 283.011030][ C0] ? security_capable+0x7e/0x2e0 [ 283.015997][ C0] ? __pfx_nldev_newlink+0x10/0x10 [ 283.021128][ C0] rdma_nl_rcv+0x6ae/0x980 [ 283.025598][ C0] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 283.030562][ C0] ? __lock_acquire+0xab9/0xd20 [ 283.035446][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.040670][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.045893][ C0] netlink_unicast+0x758/0x8d0 [ 283.050684][ C0] netlink_sendmsg+0x805/0xb30 [ 283.055481][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.060800][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 283.065774][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.071073][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.076384][ C0] __sock_sendmsg+0x219/0x270 [ 283.081082][ C0] ____sys_sendmsg+0x505/0x830 [ 283.085875][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.091221][ C0] ? import_iovec+0x74/0xa0 [ 283.095746][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 283.100449][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.105703][ C0] ? __fget_files+0x2a/0x420 [ 283.110317][ C0] ? __fget_files+0x3a0/0x420 [ 283.115027][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 283.119990][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.125480][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.130317][ C0] ? do_syscall_64+0xbe/0x3b0 [ 283.135031][ C0] do_syscall_64+0xfa/0x3b0 [ 283.139591][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.144817][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.150904][ C0] ? clear_bhb_loop+0x60/0xb0 [ 283.155605][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.161514][ C0] RIP: 0033:0x7f00a778e929 [ 283.165948][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.185580][ C0] RSP: 002b:00007f00a864d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.194103][ C0] RAX: ffffffffffffffda RBX: 00007f00a79b5fa0 RCX: 00007f00a778e929 [ 283.202092][ C0] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000004 [ 283.210086][ C0] RBP: 00007f00a7810b39 R08: 0000000000000000 R09: 0000000000000000 [ 283.218074][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.226059][ C0] R13: 0000000000000000 R14: 00007f00a79b5fa0 R15: 00007ffcf35f9568 [ 283.234153][ C0] [ 283.237542][ C0] Kernel Offset: disabled [ 283.241886][ C0] Rebooting in 86400 seconds..