last executing test programs: 1m49.943822225s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 1m44.775882028s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 1m29.588450621s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 1m26.968142589s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 1m10.970102752s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 1m8.373116553s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 49.996785326s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 49.359470571s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 31.703449537s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 29.998776504s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 13.391246531s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, r3, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}}]}, 0x60}, 0x1, 0x2}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0x0, 0xe, "bbb0a6ecdfee"}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}}, 0x0) 12.247382492s ago: executing program 2 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c00000000000000001400000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4], 0x34}}, 0x0) 1.700968512s ago: executing program 3 (id=779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000006700"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000008b00000000000000480003006465666c61746500"/240], 0x138}}, 0x0) 1.559933646s ago: executing program 3 (id=780): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x3, @loopback, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)="2284803d710ed4ef9ce7f106c034c7cb7cddfa371369f7dc8c0aa2bfe294ae940ed739b989535df6d70e793b7beffbd4793c9867c52fa4e3de94ec74f3410500b6b870baca8fcc1d2b2eb8281858cb231e42a05e5763bc535d6d5eb8f098bb1924e913dfaa674f6f63c2e0f9ab71db279407203c9c86a4c78264f6fe6f9a33b6edff3df50d19f99a02e0f96e3fc4ffcd7f80dc1dcad0476c88f47c352ed4", 0x9e}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78}}], 0x1, 0x4001c00) 1.516802388s ago: executing program 0 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7}) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r3, 0x10, 0x709d27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f18dd84f4c8fb679b852924791179a4cdf83371b7165a884aed011837b34124"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000880}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x28}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.364815247s ago: executing program 3 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004f00)=""/209, 0xd1}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f0000001e80)=""/249, 0xf9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x101}], 0x5, 0x20, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x69) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x4e23, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) socket(0x21, 0xa, 0xa59) shutdown(r1, 0x1) 1.118176404s ago: executing program 3 (id=785): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000002080)=""/4115, &(0x7f00000000c0)=0x1013) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf256c0000000c009900040000002a00000005001801160000000800a1007196552a"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x80) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 1.008284589s ago: executing program 0 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08000d0079ffffff0a0018"], 0x44}}, 0x40840) 903.527471ms ago: executing program 4 (id=787): socket$inet6(0xa, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 814.060313ms ago: executing program 0 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_EVENT={0x8, 0x2c, 0x2f}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 737.784425ms ago: executing program 4 (id=789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 647.83223ms ago: executing program 0 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50129bd7000feffffff07400000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000200ff"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000001c61102c000000000095000000001e0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r9) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000370000008000000000000000000000000000c7e257", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12c7c4ed0000000c00000008ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r12, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r13}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async) r15 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r16, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) 647.266508ms ago: executing program 4 (id=791): socketpair(0x26, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800030}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2dc, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfb7a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x112f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x332a}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "960d7c696b8586d423ce52c9c7a14e02b1711647ef5012"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "7fdf9884db3c97dd4f93cc04e40a82b67e1fe49f56308ac49d8b5f2a07c785d49bdf9ff43439e998bf2437db96e4e74fec351ebc23acecff41670148a2a67b7a2f74e9a621316fd33b6fd570a64eb800163886addbfa6744147577fefd58dec988606c7f729d2de6f8749fe05e8b7fc167a7bcdef1f95bc9ba60560c0dab226fa51f1c49f76eed275f361e4e23c5d1e47ad6756e34104f20593ab2f11c0108327027914cedc743f3f7c718b154429ba05133"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x2, 0xd8, &(0x7f0000000440)="322f6da031acd3482d2c997ceb9a84966bddb9942c3afde21e22d1773011aba2e7c57a08ab924ca8d2c0c1a14f8babf9740d0b18dfe81d8a089a3826beda44e27cf169d12f5f56810838dbfaf1b0378a578e37d2245a5d30d3be49ca60497d8b850787f4fa59c425380ad1b4e93e57a290b058b7f79a2275c86c905c4062f77de6a5f0b9694cda3426b0e7f39bf28b6b23122019f5d800600b51de7cc2aa15e932ee7a6ae249e28ca595cccd40b3af2a5cf4afb5fcd6df7372b6dbb5641f344f54d8ad67103fdb4e095603f884fd17cea33023fe6ad3d963", 0x0, 0x1}]}) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e21, 0x101, @mcast2, 0x4}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'batadv_slave_1\x00', 0x3}, 0x18) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r4, &(0x7f0000000680)="f4421a8163c4ee2b48704b30a919ab1d41af642fe58d31666f77248a89439e8d5c6b8a55fa69f2b36ae6dd3317db3d3c091f5db9e93be1de36198d131891cfffcb565c734255dad97c1473147a5425e709eab00f4f79cff4a3c52c3e0b9e81fd7bda6c473d9e4687579485903c483fa35e7e2f479735e37c4f1ecdd218626e2dfa4093b86fd2f6ef39e7b82dd9e407be8a6031ebd348acd143f8240769fa27ac23ca3d533b34be3d872f51a8d5102eda95a560e6", 0xb4, 0x20040000, &(0x7f0000000740)={0xa, 0x4e23, 0x1, @private2, 0x7fffffff}, 0x1c) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup, 0x2e, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@fallback=r6, r3, 0x2b, 0x4e5d9fbde6da3a51, r3, @value=r3, @void, @void, @void, r5}, 0x20) (async) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf8, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd3, 0x3, "ce64b8bae2c577c76487ce8e96497b7188e5852725bcd18ff1ccac4e178d221f50e80176f78c648487f9c8c3c99af885897866dcc92f26c3f731838d2361924492e825e62c0dd1094dcad9f1a751ca3dd422f44bd6563306f4c0aee83708abc03a96194fa564b50caa5246e864711780600e0b49c1d0af5901b7706342c5c51f37f83e9481f649818f3d974d65b3ef5fce46c8dab238306a8ed10422ba557d54965f01acc0e838941f34ae093cd6ffd3bd0cb0e0071e4113d430e3ef838f0e817df6a0d121ddf8e809141160ae000c"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x404c804}, 0x800) bind$tipc(r4, &(0x7f0000000b00)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c00)={r4, &(0x7f0000000b40)="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", &(0x7f0000001b40)=""/132}, 0x20) (async) socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002d00)={r4, &(0x7f0000001c40)="3aa4bf5867877d5630bdc8998b9a366969891ef90db1aab52d11b080ac9305accb44a5f6ba6feccdcbfe3ce2f462e20ae443daef758301ca8695cc0510dbc68de2d641c024c16bcadc92970c1628499f9a3f17c2897c39c87f9fb0db475be08f57d965aa1180493c9fd70d6a420096354dfcd212ccebd0e42a0810e3495460cf28940951eaedf137dfc7ead9f329b8ce6acf6461", &(0x7f0000001d00)=""/4096}, 0x20) r7 = accept4$packet(r3, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002d80)=0x14, 0x80800) getsockname$packet(r7, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002e00)=0x14) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000002e40)={0x8, 'veth1_to_batadv\x00', {'veth1_to_bond\x00'}, 0xfff7}) getpeername$packet(r1, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002ec0)=0x14) (async) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000003040)={&(0x7f0000002f00), 0xc, &(0x7f0000003000)={&(0x7f0000002f40)={0x88, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000085) (async) bind$unix(r1, &(0x7f0000003080)=@file={0x0, './file0\x00'}, 0x6e) r8 = accept4(0xffffffffffffffff, &(0x7f0000003100)=@ieee802154={0x24, @long}, &(0x7f0000003180)=0x80, 0x80400) getsockname$packet(r8, &(0x7f00000031c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003200)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000003240)={0x0, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x187f}}, 0xf, 0xff, 0x8, 0x3, 0x9}, &(0x7f0000003300)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003340)={r9, 0x5, 0x7, 0x1}, 0x10) ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000003380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 519.508507ms ago: executing program 3 (id=792): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xa, 0x5, [{0x6, 0xf1, 0x4, 0x3}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727a606495803509f84729f3e8a2fbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f37feb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b56549616bfede82c598301c98b0420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b336851d9c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf380000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x441}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x88) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x54593, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) 519.062859ms ago: executing program 4 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_pressure(r2, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000200)={'full', 0x20, 0x19d, 0x20, 0x6}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) openat$cgroup_pressure(r2, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) (async) write$cgroup_pressure(r5, &(0x7f0000000200)={'full', 0x20, 0x19d, 0x20, 0x6}, 0x2f) (async) 444.917486ms ago: executing program 0 (id=794): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bind$bt_sco(r0, &(0x7f00000004c0)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) 343.972801ms ago: executing program 4 (id=795): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) 166.311017ms ago: executing program 3 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r1, 0x0, 0x0, 0xc891, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x3}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 118.65017ms ago: executing program 0 (id=797): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xb33, 0x2, [0x7, 0xb]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x9}, 0x90) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x1, @empty, 0x222ec7cf}}, 0xe, 0x8, 0x800, 0x0, 0x20, 0x3ff, 0xfb}, &(0x7f0000000240)=0x9c) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={r2, 0x2, 0x7fffffffffffffff, 0x194}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x4, 0xfffffffa, 0xff, 0x6, 0x8}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={r6, 0x89, "22ee7cfefe2b2c6e11c59af01973fb098921f17b4cd84cbf8dc2960161ada0f7ceb4a20f748df20778f9fada6a40b2f84dc946580ee74d44b64e6750d2d2ec0b5c3dbf87d10f6934ffbc6e6e02ca41279d41ca4db8101a4a4b824a081fb2daea17f9ba8d55e69edfbae8b196986ddd3624e04f357e3700ff8d3fc3225df4dc747237fd4e2fd752fd87"}, &(0x7f0000000580)=0x91) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000005c0)={r6, 0x0, 0x1, 0x1}, &(0x7f0000000600)=0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0xfffffffc, 0xff, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x4e, 0x0, 0xf, [0x5]}, @end, @lsrr={0x83, 0xf, 0x5b, [@multicast1, @broadcast, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x28, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x0, 0x9, 0x0, 0x8, 0xfffffffffffffffe, 0x4}, @jmp={0x5, 0x0, 0x4, 0x2, 0x4, 0x20, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x4, 0x5d, &(0x7f00000007c0)=""/93, 0x41100, 0x0, '\x00', r9, @fallback=0x23, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0x7, 0x2ed6, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000a00), &(0x7f0000000a40)=0xe) accept$packet(r5, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000b00)={r7, 0x10, "6baa4d36e8144757cb949adf92ec1189"}, &(0x7f0000000b40)=0x18) pipe(&(0x7f0000000b80)={0xffffffffffffffff}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000bc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r9}, 0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000c00)=0xffffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f0000000cc0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000d00)={0x2, 0x0, 0x5, 0x1, 0xf, 0x90, 0x6, 0x8000, r8}, &(0x7f0000000d40)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000d80)={r12, 0x401}, &(0x7f0000000dc0)=0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r14, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x4, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000f40)={r13, 0xc, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) 0s ago: executing program 4 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) clock_gettime(0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) sendmsg$sock(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d61737100000000090000000900020073793a320000000014000000110001000000000000004e44b31e2e63f700db4b000000"], 0x68}}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xcb, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="3001fb90647586f4601659c5", 0x5}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) kernel console output (not intermixed with test programs): app [ 119.444706][ T6755] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 119.500860][ T6755] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 119.708345][ T6765] net veth1_virt_wifi : renamed from virt_wifi0 [ 119.750600][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.814527][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.842231][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.849543][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.897266][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.904539][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.022246][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.267654][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 120.323622][ T6795] netlink: 'syz.3.197': attribute type 16 has an invalid length. [ 120.344833][ T6795] netlink: 'syz.3.197': attribute type 17 has an invalid length. [ 120.531127][ T6333] veth0_vlan: entered promiscuous mode [ 120.604756][ T6333] veth1_vlan: entered promiscuous mode [ 120.810945][ T6333] veth0_macvtap: entered promiscuous mode [ 120.824366][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.927340][ T6333] veth1_macvtap: entered promiscuous mode [ 121.037661][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.055200][ T6819] netlink: 'syz.3.203': attribute type 21 has an invalid length. [ 121.061489][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.083401][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.114035][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.138045][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.168276][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.191261][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.235421][ T6819] netlink: 'syz.3.203': attribute type 6 has an invalid length. [ 121.244628][ T6819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.203'. [ 121.261864][ T6824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 121.286681][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.300665][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 121.328341][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.344808][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.355805][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.366924][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.388008][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.406633][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.452642][ T6333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.493881][ T6333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.504647][ T6333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.521031][ T6333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.605111][ T6843] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 121.705226][ T6843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.746798][ T6451] veth0_vlan: entered promiscuous mode [ 121.805356][ T6853] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 121.852841][ T6451] veth1_vlan: entered promiscuous mode [ 121.922906][ T6863] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 121.928211][ T6855] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 122.190816][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.210356][ T6451] veth0_macvtap: entered promiscuous mode [ 122.261638][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.375566][ T6451] veth1_macvtap: entered promiscuous mode [ 122.454647][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.472869][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.507531][ T6884] bridge0: port 3(gretap0) entered blocking state [ 122.549684][ T6884] bridge0: port 3(gretap0) entered disabled state [ 122.573448][ T6884] gretap0: entered allmulticast mode [ 122.590083][ T6884] gretap0: entered promiscuous mode [ 122.604644][ T6884] bridge0: port 3(gretap0) entered blocking state [ 122.611340][ T6884] bridge0: port 3(gretap0) entered forwarding state [ 122.680342][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.725100][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.784155][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.815623][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.842214][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.867427][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.888870][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.924335][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.955812][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.077577][ T6900] tipc: Started in network mode [ 123.089459][ T6900] tipc: Node identity , cluster identity 4711 [ 123.095630][ T6900] tipc: Failed to obtain node identity [ 123.105867][ T6900] tipc: Enabling of bearer rejected, failed to enable media [ 123.124897][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.144020][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 123.146579][ T6901] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 123.165940][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.192612][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.218155][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.276221][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.298052][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.319609][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.348807][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.374713][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.667451][ T6923] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 123.710873][ T5951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.776934][ T6451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.799545][ T6451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.821282][ T6451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.850465][ T6451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.027483][ T5951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.181076][ T6934] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 124.217101][ T6935] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 124.251485][ T5951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.522350][ T5951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.645653][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 124.654888][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.687752][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.873696][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.904138][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.105728][ T5951] bridge_slave_1: left allmulticast mode [ 125.128223][ T5951] bridge_slave_1: left promiscuous mode [ 125.134200][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.195680][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.205247][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.214190][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.224504][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.233204][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.239938][ T5951] bridge_slave_0: left allmulticast mode [ 125.258420][ T5951] bridge_slave_0: left promiscuous mode [ 125.264294][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.780242][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.795517][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.817481][ T5951] bond0 (unregistering): Released all slaves [ 125.854437][ T6959] vlan2: entered allmulticast mode [ 125.866454][ T6959] bond0: entered allmulticast mode [ 125.875643][ T6959] bond_slave_0: entered allmulticast mode [ 125.882308][ T6959] bond_slave_1: entered allmulticast mode [ 125.902718][ T6959] batadv0: entered allmulticast mode [ 126.250659][ T6992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'. [ 126.303863][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 126.427335][ T6995] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.436503][ T6995] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.445336][ T6995] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.454821][ T6995] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.498654][ T6995] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.507760][ T6995] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.517293][ T6995] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.527682][ T6995] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.694658][ T5951] hsr_slave_0: left promiscuous mode [ 126.709279][ T6995] syz.3.235 (6995) used greatest stack depth: 18744 bytes left [ 126.720543][ T5951] hsr_slave_1: left promiscuous mode [ 126.750815][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.788034][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.810291][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.817782][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.855535][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 126.889208][ T5951] veth1_macvtap: left promiscuous mode [ 126.898541][ T5951] veth0_macvtap: left promiscuous mode [ 126.907100][ T5951] veth1_vlan: left promiscuous mode [ 126.918729][ T5951] veth0_vlan: left promiscuous mode [ 127.316354][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.328250][ T5850] Bluetooth: hci3: command tx timeout [ 127.334498][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.344204][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.354166][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.362259][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.627756][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 127.668682][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 128.190267][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 128.278922][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 128.297679][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 128.327839][ T7028] bond0: entered promiscuous mode [ 128.339280][ T7028] bond_slave_0: entered promiscuous mode [ 128.350906][ T7028] bond_slave_1: entered promiscuous mode [ 128.367490][ T7028] batadv0: entered promiscuous mode [ 128.376069][ T7028] syz_tun: entered promiscuous mode [ 128.697098][ T7052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.245'. [ 129.052906][ T6961] chnl_net:caif_netlink_parms(): no params data found [ 129.261771][ T5951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.409368][ T5856] Bluetooth: hci3: command tx timeout [ 129.415006][ T5856] Bluetooth: hci0: command tx timeout [ 129.511229][ T5951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.569899][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 129.745142][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.253'. [ 129.767378][ T5951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.798918][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.255'. [ 129.821517][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 129.848297][ T5951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.968335][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.975557][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.012496][ T6961] bridge_slave_0: entered allmulticast mode [ 130.023929][ T6961] bridge_slave_0: entered promiscuous mode [ 130.050049][ T7107] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 130.103578][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.126488][ T7112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.137133][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.172145][ T6961] bridge_slave_1: entered allmulticast mode [ 130.230272][ T6961] bridge_slave_1: entered promiscuous mode [ 130.387277][ T7126] netlink: 'syz.0.259': attribute type 9 has an invalid length. [ 130.397792][ T7126] netlink: 'syz.0.259': attribute type 6 has an invalid length. [ 130.409146][ T7127] netlink: 'syz.0.259': attribute type 9 has an invalid length. [ 130.431755][ T7127] netlink: 'syz.0.259': attribute type 6 has an invalid length. [ 130.652769][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.739035][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.746257][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.771322][ T7142] netlink: 100 bytes leftover after parsing attributes in process `syz.4.262'. [ 130.785245][ T7022] bridge_slave_0: entered allmulticast mode [ 130.800887][ T7022] bridge_slave_0: entered promiscuous mode [ 130.815418][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.835637][ T7145] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.891971][ T7142] tipc: Enabling of bearer rejected, failed to enable media [ 130.901485][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.916435][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.924252][ T7022] bridge_slave_1: entered allmulticast mode [ 130.933751][ T7022] bridge_slave_1: entered promiscuous mode [ 130.979871][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 131.084973][ T7148] tipc: Started in network mode [ 131.110755][ T7148] tipc: Node identity a630e796530a, cluster identity 4711 [ 131.152516][ T7148] tipc: Enabled bearer , priority 10 [ 131.436312][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 131.488208][ T5850] Bluetooth: hci3: command tx timeout [ 131.500976][ T5850] Bluetooth: hci0: command tx timeout [ 131.623800][ T6961] team0: Port device team_slave_0 added [ 131.656838][ T6961] team0: Port device team_slave_1 added [ 131.702112][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.711858][ T5951] bridge_slave_1: left allmulticast mode [ 131.717553][ T5951] bridge_slave_1: left promiscuous mode [ 131.727464][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.738765][ T5951] bridge_slave_0: left allmulticast mode [ 131.744440][ T5951] bridge_slave_0: left promiscuous mode [ 131.756483][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.024470][ T7179] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 132.091967][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.107355][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.118341][ T5951] bond0 (unregistering): Released all slaves [ 132.170184][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.195152][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.256479][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.279121][ T47] tipc: Node number set to 4114278294 [ 132.296969][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.388586][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.492465][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.503408][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.562083][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.586600][ T7198] netlink: 'syz.4.272': attribute type 20 has an invalid length. [ 132.601680][ T7022] team0: Port device team_slave_0 added [ 132.633625][ T7022] team0: Port device team_slave_1 added [ 132.823901][ T7207] openvswitch: netlink: Key type 2822 is out of range max 32 [ 132.853957][ T6961] hsr_slave_0: entered promiscuous mode [ 132.865949][ T6961] hsr_slave_1: entered promiscuous mode [ 132.876705][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.886928][ T6961] Cannot create hsr debugfs directory [ 132.935651][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947718][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992969][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.001055][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.033333][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.078071][ T5951] hsr_slave_0: left promiscuous mode [ 133.089958][ T5951] hsr_slave_1: left promiscuous mode [ 133.118403][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.125890][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.150156][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.157722][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.220787][ T5951] veth1_macvtap: left promiscuous mode [ 133.226401][ T5951] veth0_macvtap: left promiscuous mode [ 133.245229][ T7227] xt_bpf: check failed: parse error [ 133.247328][ T5951] veth1_vlan: left promiscuous mode [ 133.255979][ T5951] veth0_vlan: left promiscuous mode [ 133.560947][ T7240] __nla_validate_parse: 2 callbacks suppressed [ 133.560969][ T7240] netlink: 56 bytes leftover after parsing attributes in process `syz.4.281'. [ 133.578112][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 133.583969][ T55] Bluetooth: hci3: command tx timeout [ 133.592737][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 133.604951][ T7240] netlink: 31 bytes leftover after parsing attributes in process `syz.4.281'. [ 133.615085][ T7240] netlink: 'syz.4.281': attribute type 2 has an invalid length. [ 133.626935][ T7240] netlink: 31 bytes leftover after parsing attributes in process `syz.4.281'. [ 133.934435][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 133.972173][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 134.320995][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.330410][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.356630][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.379190][ T7218] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.406358][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 134.615955][ T7250] xt_hashlimit: overflow, rate too high: 0 [ 134.688550][ T7022] hsr_slave_0: entered promiscuous mode [ 134.700565][ T7022] hsr_slave_1: entered promiscuous mode [ 134.706964][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.718410][ T7022] Cannot create hsr debugfs directory [ 134.884382][ T7255] syzkaller1: entered promiscuous mode [ 134.893375][ T7255] syzkaller1: entered allmulticast mode [ 135.652397][ T5856] Bluetooth: hci0: command 0x040f tx timeout [ 135.952474][ T7292] vlan2: entered promiscuous mode [ 135.975121][ T7292] bridge0: entered promiscuous mode [ 136.320510][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 136.374498][ T7303] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 136.411135][ T7302] nbd: couldn't find device at index 65536 [ 136.459398][ T6961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.533632][ T6961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.663693][ T6961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.709458][ T7306] vxcan0: tx drop: invalid da for name 0x0000000000000004 [ 136.761286][ T6961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.328327][ T5856] Bluetooth: hci2: command tx timeout [ 137.403806][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.440008][ T7022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.510815][ T7022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.565038][ T7022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.596679][ T7332] netlink: 'syz.4.302': attribute type 21 has an invalid length. [ 137.605507][ T7022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.658922][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.302'. [ 137.729592][ T5856] Bluetooth: hci0: command 0x040f tx timeout [ 137.815838][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 137.826659][ T7337] syz_tun: entered allmulticast mode [ 137.916015][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.303'. [ 137.967738][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.039600][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 138.239974][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.247175][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.350401][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.357636][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.416710][ T7357] "syz.0.307" (7357) uses obsolete ecb(arc4) skcipher [ 138.632506][ T6961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.794861][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.992110][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.068772][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.076039][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.123950][ T7362] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 139.126852][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.143541][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.307698][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 139.339109][ T7383] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 139.420127][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.467095][ T7022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.507871][ T7386] netlink: 128 bytes leftover after parsing attributes in process `syz.4.312'. [ 139.518673][ T7386] netlink: 128 bytes leftover after parsing attributes in process `syz.4.312'. [ 139.708392][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 139.729463][ T7401] sctp: [Deprecated]: syz.4.316 (pid 7401) Use of int in max_burst socket option. [ 139.729463][ T7401] Use struct sctp_assoc_value instead [ 139.787416][ T6961] veth0_vlan: entered promiscuous mode [ 139.816373][ T6961] veth1_vlan: entered promiscuous mode [ 140.004717][ T6961] veth0_macvtap: entered promiscuous mode [ 140.012152][ T7411] Bluetooth: MGMT ver 1.23 [ 140.036671][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 140.061948][ T6961] veth1_macvtap: entered promiscuous mode [ 140.190745][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.221660][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.255176][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.286379][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.309191][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.336179][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.357278][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 140.361601][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.471573][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.483225][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.505469][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.517703][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.533024][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.546944][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.572845][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.585863][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.631681][ T6961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.642138][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.323'. [ 140.652314][ T6961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.663973][ T6961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.675427][ T6961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.909562][ T7022] veth0_vlan: entered promiscuous mode [ 140.976424][ T7022] veth1_vlan: entered promiscuous mode [ 141.002704][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.046485][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.196549][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.222429][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.253653][ T7022] veth0_macvtap: entered promiscuous mode [ 141.297234][ T7464] netlink: 104 bytes leftover after parsing attributes in process `syz.0.328'. [ 141.319710][ T7022] veth1_macvtap: entered promiscuous mode [ 141.400704][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.421632][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.452610][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.463934][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.477233][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.498003][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.518136][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.529009][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.541397][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.602139][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.628165][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.668977][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.693149][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.712943][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.723565][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.737812][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.784821][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.816631][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.837779][ T7474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.330'. [ 141.940830][ T7486] netlink: 52 bytes leftover after parsing attributes in process `syz.4.333'. [ 142.020987][ T7022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.033195][ T7022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.051676][ T7022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.060593][ T7022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.441091][ T5956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.561118][ T5956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.637854][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.666707][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.669783][ T7518] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 142.734068][ T5956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.830080][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.876267][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.901568][ T5956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.014917][ T976] IPVS: starting estimator thread 0... [ 143.029012][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.068744][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.075865][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.098250][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.128762][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.138170][ T7535] IPVS: using max 27 ests per chain, 64800 per kthread [ 143.201615][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.263187][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.298686][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.308645][ T7529] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.498734][ T5956] bridge_slave_1: left allmulticast mode [ 143.504909][ T5956] bridge_slave_1: left promiscuous mode [ 143.531338][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.592854][ T5956] bridge_slave_0: left allmulticast mode [ 143.625109][ T5956] bridge_slave_0: left promiscuous mode [ 143.640873][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.677736][ T7559] IPVS: set_ctl: invalid protocol: 135 172.20.20.57:0 [ 143.751478][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.762367][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.770595][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.779278][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.792779][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.557391][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.576852][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.593970][ T5956] bond0 (unregistering): Released all slaves [ 144.980626][ T7604] __nla_validate_parse: 3 callbacks suppressed [ 144.980650][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 145.166291][ T7607] netlink: 'syz.4.351': attribute type 2 has an invalid length. [ 145.204388][ T47] IPVS: starting estimator thread 0... [ 145.273576][ T5956] hsr_slave_0: left promiscuous mode [ 145.290437][ T5956] hsr_slave_1: left promiscuous mode [ 145.296667][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.304942][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.308168][ T7611] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.321652][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.330289][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.404788][ T5956] veth1_macvtap: left promiscuous mode [ 145.424879][ T5956] veth0_macvtap: left promiscuous mode [ 145.438409][ T5956] veth1_vlan: left promiscuous mode [ 145.451818][ T5956] veth0_vlan: left promiscuous mode [ 145.889237][ T5856] Bluetooth: hci0: command tx timeout [ 146.135369][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.147779][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.169860][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.185494][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.198583][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.617108][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 146.667738][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 147.536969][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.751484][ T7700] netlink: 76 bytes leftover after parsing attributes in process `syz.0.361'. [ 147.846724][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 147.968625][ T5856] Bluetooth: hci0: command tx timeout [ 148.256101][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 148.298061][ T5856] Bluetooth: hci3: command tx timeout [ 148.346719][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.363678][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.371895][ T7564] bridge_slave_0: entered allmulticast mode [ 148.380055][ T7564] bridge_slave_0: entered promiscuous mode [ 148.512793][ T7731] IPVS: ip_vs_add_dest(): server weight less than zero [ 148.528345][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.545879][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.563755][ T7564] bridge_slave_1: entered allmulticast mode [ 148.572852][ T7564] bridge_slave_1: entered promiscuous mode [ 148.723920][ T5956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.783230][ T7741] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 148.897212][ T7743] Bluetooth: MGMT ver 1.23 [ 148.946981][ T5956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.967524][ T7746] netlink: 92 bytes leftover after parsing attributes in process `syz.0.371'. [ 148.985627][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.004798][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.146942][ T976] hid-generic 0005:10CF:5540.0001: item fetching failed at offset 0/2 [ 149.156890][ T5956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.167120][ T976] hid-generic 0005:10CF:5540.0001: probe with driver hid-generic failed with error -22 [ 149.257876][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.278942][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.286258][ T7641] bridge_slave_0: entered allmulticast mode [ 149.304442][ T7641] bridge_slave_0: entered promiscuous mode [ 149.324224][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.356570][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.389052][ T7641] bridge_slave_1: entered allmulticast mode [ 149.401135][ T7641] bridge_slave_1: entered promiscuous mode [ 149.443739][ T5956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.494798][ T7564] team0: Port device team_slave_0 added [ 149.737346][ T7564] team0: Port device team_slave_1 added [ 149.907669][ T7781] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 149.934839][ T7781] syz.3.378 uses old SIOCAX25GETINFO [ 149.975080][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.000510][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.048897][ T55] Bluetooth: hci0: command tx timeout [ 150.116244][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.171010][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.231157][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.293845][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.304252][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.333009][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.368445][ T55] Bluetooth: hci3: command tx timeout [ 150.465795][ T7799] net_ratelimit: 24 callbacks suppressed [ 150.465816][ T7799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.492500][ T7800] netlink: 'syz.4.380': attribute type 12 has an invalid length. [ 150.503278][ T7800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.380'. [ 150.538729][ T7641] team0: Port device team_slave_0 added [ 150.552469][ T7641] team0: Port device team_slave_1 added [ 150.571514][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.857200][ T7816] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 150.872965][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.874102][ T7816] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 150.893180][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.922150][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.983562][ T7564] hsr_slave_0: entered promiscuous mode [ 150.991929][ T7564] hsr_slave_1: entered promiscuous mode [ 151.000854][ T7564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.011122][ T7564] Cannot create hsr debugfs directory [ 151.026312][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.039229][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.053363][ T7823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.389'. [ 151.070558][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.110071][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'. [ 151.129965][ T5956] bridge_slave_1: left allmulticast mode [ 151.137020][ T5956] bridge_slave_1: left promiscuous mode [ 151.149507][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.192281][ T5956] bridge_slave_0: left allmulticast mode [ 151.208738][ T5956] bridge_slave_0: left promiscuous mode [ 151.215076][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.355285][ T7830] netlink: 1344 bytes leftover after parsing attributes in process `syz.4.390'. [ 151.566250][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.579708][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.591080][ T5956] bond0 (unregistering): Released all slaves [ 151.613947][ T7825] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 151.864518][ T7842] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 151.876366][ T7641] hsr_slave_0: entered promiscuous mode [ 151.885114][ T7843] x_tables: duplicate underflow at hook 2 [ 151.887517][ T7641] hsr_slave_1: entered promiscuous mode [ 151.901941][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.915108][ T7641] Cannot create hsr debugfs directory [ 152.011104][ T7837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.129568][ T55] Bluetooth: hci0: command tx timeout [ 152.451178][ T55] Bluetooth: hci3: command tx timeout [ 152.507369][ T7868] netlink: 'syz.0.402': attribute type 21 has an invalid length. [ 152.513064][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 152.534558][ T7864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.400'. [ 152.554825][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 152.666376][ T7878] syz.4.401: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.722439][ T5956] hsr_slave_0: left promiscuous mode [ 152.809073][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.4.401 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 152.809105][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.809122][ T7878] Call Trace: [ 152.809131][ T7878] [ 152.809141][ T7878] dump_stack_lvl+0x241/0x360 [ 152.809191][ T7878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.809222][ T7878] ? __pfx__printk+0x10/0x10 [ 152.809250][ T7878] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 152.809276][ T7878] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 152.809299][ T7878] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 152.809326][ T7878] warn_alloc+0x27c/0x410 [ 152.809396][ T7878] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 152.809425][ T7878] ? __pfx_warn_alloc+0x10/0x10 [ 152.809454][ T7878] ? kasan_save_track+0x3f/0x80 [ 152.809482][ T7878] ? __kasan_kmalloc+0x9d/0xb0 [ 152.809514][ T7878] ? xsk_setsockopt+0x449/0x840 [ 152.809544][ T7878] ? do_sock_setsockopt+0x3b1/0x710 [ 152.809575][ T7878] ? __x64_sys_setsockopt+0x187/0x210 [ 152.809605][ T7878] ? do_syscall_64+0xf3/0x210 [ 152.809626][ T7878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.809657][ T7878] __vmalloc_node_range_noprof+0x128/0x1390 [ 152.809715][ T7878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.809748][ T7878] ? __kasan_kmalloc+0x9d/0xb0 [ 152.809805][ T7878] vmalloc_user_noprof+0x74/0x80 [ 152.809833][ T7878] ? xskq_create+0xb6/0x170 [ 152.809851][ T7878] xskq_create+0xb6/0x170 [ 152.809872][ T7878] xsk_init_queue+0xa1/0x100 [ 152.809909][ T7878] xsk_setsockopt+0x449/0x840 [ 152.809945][ T7878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.809977][ T7878] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.810001][ T7878] ? __lock_acquire+0xad5/0xd80 [ 152.810034][ T7878] ? aa_sock_opt_perm+0x79/0x120 [ 152.810068][ T7878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.810098][ T7878] do_sock_setsockopt+0x3b1/0x710 [ 152.810138][ T7878] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 152.810167][ T7878] ? __fget_files+0x2a/0x420 [ 152.810189][ T7878] ? __fget_files+0x39d/0x420 [ 152.810207][ T7878] ? __fget_files+0x2a/0x420 [ 152.810236][ T7878] __x64_sys_setsockopt+0x187/0x210 [ 152.810276][ T7878] do_syscall_64+0xf3/0x210 [ 152.810300][ T7878] ? clear_bhb_loop+0x45/0xa0 [ 152.810325][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.810346][ T7878] RIP: 0033:0x7f1cbd38e969 [ 152.810376][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.810393][ T7878] RSP: 002b:00007f1cbe276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.810418][ T7878] RAX: ffffffffffffffda RBX: 00007f1cbd5b6160 RCX: 00007f1cbd38e969 [ 152.810433][ T7878] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 152.810446][ T7878] RBP: 00007f1cbd410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 152.810460][ T7878] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.810474][ T7878] R13: 0000000000000000 R14: 00007f1cbd5b6160 R15: 00007ffc01a19828 [ 152.810508][ T7878] [ 152.810518][ T7878] Mem-Info: [ 153.035801][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 153.071547][ T5956] hsr_slave_1: left promiscuous mode [ 153.149056][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.156539][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.168081][ T7878] active_anon:5216 inactive_anon:0 isolated_anon:0 [ 153.168081][ T7878] active_file:1325 inactive_file:38343 isolated_file:0 [ 153.168081][ T7878] unevictable:768 dirty:106 writeback:0 [ 153.168081][ T7878] slab_reclaimable:9952 slab_unreclaimable:99475 [ 153.168081][ T7878] mapped:30608 shmem:1419 pagetables:928 [ 153.168081][ T7878] sec_pagetables:0 bounce:0 [ 153.168081][ T7878] kernel_misc_reclaimable:0 [ 153.168081][ T7878] free:1339038 free_pcp:535 free_cma:0 [ 153.231646][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.255442][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.265637][ T7878] Node 0 active_anon:20764kB inactive_anon:0kB active_file:5300kB inactive_file:153300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122532kB dirty:424kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11816kB pagetables:3512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.352849][ T7878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.362185][ T5956] veth1_macvtap: left promiscuous mode [ 153.417031][ T7878] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.419623][ T5956] veth0_macvtap: left promiscuous mode [ 153.456444][ T5956] veth1_vlan: left promiscuous mode [ 153.463138][ T5956] veth0_vlan: left promiscuous mode [ 153.480611][ T7878] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 153.498234][ T7878] Node 0 DMA32 free:1436728kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21056kB inactive_anon:0kB active_file:5300kB inactive_file:153208kB unevictable:1536kB writepending:420kB present:3129332kB managed:2547268kB mlocked:0kB bounce:0kB free_pcp:2580kB local_pcp:1520kB free_cma:0kB [ 153.568039][ T7896] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 153.582521][ T7878] lowmem_reserve[]: 0 0 0 0 0 [ 153.591196][ T7878] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 153.623486][ T7878] lowmem_reserve[]: 0 0 0 0 0 [ 153.629041][ T7878] Node 1 Normal free:3904260kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.669946][ T7878] lowmem_reserve[]: 0 0 0 0 0 [ 153.674789][ T7878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.713989][ T7878] Node 0 DMA32: 19*4kB (UME) 35*8kB (UME) 34*16kB (UE) 104*32kB (UME) 59*64kB (UME) 44*128kB (UME) 40*256kB (UM) 24*512kB (UM) 9*1024kB (UM) 0*2048kB 340*4096kB (ME) = 1438020kB [ 153.772015][ T7878] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 153.829339][ T7878] Node 1 Normal: 243*4kB (UE) 45*8kB (UME) 43*16kB (UME) 233*32kB (UME) 106*64kB (UME) 37*128kB (UME) 17*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3904260kB [ 153.848948][ T7878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.866985][ T7878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.930178][ T7878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.959009][ T7878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.990356][ T7878] 41090 total pagecache pages [ 154.007886][ T7878] 0 pages in swap cache [ 154.014750][ T7878] Free swap = 124996kB [ 154.029166][ T7878] Total swap = 124996kB [ 154.033427][ T7878] 2097051 pages RAM [ 154.037236][ T7878] 0 pages HighMem/MovableOnly [ 154.043194][ T7878] 428576 pages reserved [ 154.047421][ T7878] 0 pages cma reserved [ 154.218975][ T55] Bluetooth: hci0: command tx timeout [ 154.247392][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 154.285686][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 154.532875][ T55] Bluetooth: hci3: command tx timeout [ 154.656644][ T7887] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 154.700558][ T7905] syzkaller0: entered allmulticast mode [ 155.027213][ T7912] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 155.239280][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 155.282720][ T7910] x_tables: unsorted underflow at hook 1 [ 155.294192][ T7910] netlink: 80 bytes leftover after parsing attributes in process `syz.4.406'. [ 155.864855][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 156.107249][ T7958] netlink: 'syz.3.419': attribute type 5 has an invalid length. [ 156.282212][ T7964] team_slave_0: entered promiscuous mode [ 156.288153][ T7964] team_slave_1: entered promiscuous mode [ 156.322469][ T7964] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.339433][ T7964] team0: Device macvtap1 is already an upper device of the team interface [ 156.373356][ T7964] team_slave_0: left promiscuous mode [ 156.378935][ T7964] team_slave_1: left promiscuous mode [ 156.517124][ T7975] bond1: entered promiscuous mode [ 156.523236][ T7975] bond1: entered allmulticast mode [ 156.738413][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 156.781521][ T7979] nbd: must specify at least one socket [ 156.858337][ T7641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.897129][ T7641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.905569][ T7990] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 156.995216][ T7641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.022785][ T7641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.156086][ T7564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.211993][ T7564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.293357][ T7564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.299497][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'. [ 157.322213][ T7564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.612927][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.637645][ T8015] tipc: Started in network mode [ 157.643831][ T8015] tipc: Node identity e23825174f68, cluster identity 4711 [ 157.658632][ T8015] tipc: Enabled bearer , priority 0 [ 157.775277][ T8015] syzkaller0: entered promiscuous mode [ 157.785120][ T8015] syzkaller0: entered allmulticast mode [ 157.792341][ T8015] tipc: Resetting bearer [ 157.819236][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.833806][ T8013] tipc: Resetting bearer [ 158.698152][ T976] tipc: Node number set to 2907710743 [ 159.523071][ T8013] tipc: Disabling bearer [ 159.561614][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.568896][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.647754][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.665540][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.672829][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.733497][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.766577][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.773874][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.800294][ T8087] netlink: 'syz.3.441': attribute type 9 has an invalid length. [ 159.841148][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.848400][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.192813][ T8106] openvswitch: netlink: Message has 4 unknown bytes. [ 160.360463][ T8114] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 160.398149][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 160.410148][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 160.483690][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.643914][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.657382][ T8123] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.663031][ T7641] veth0_vlan: entered promiscuous mode [ 160.776305][ T7641] veth1_vlan: entered promiscuous mode [ 160.942045][ T7641] veth0_macvtap: entered promiscuous mode [ 160.954411][ T7564] veth0_vlan: entered promiscuous mode [ 160.973311][ T7641] veth1_macvtap: entered promiscuous mode [ 161.011083][ T7564] veth1_vlan: entered promiscuous mode [ 161.079078][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.102147][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.121089][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.132043][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.144518][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.155378][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.167153][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.227127][ T7564] veth0_macvtap: entered promiscuous mode [ 161.243896][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.268171][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.288807][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.323357][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'. [ 161.325528][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.362709][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.373709][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.385307][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 161.394306][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.414036][ T7564] veth1_macvtap: entered promiscuous mode [ 161.419739][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 161.448945][ T7641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.457851][ T7641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.472678][ T7641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.482799][ T7641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.519467][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.542999][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.559166][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.573318][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.583838][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.597496][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.615889][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.627033][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.644383][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.734390][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.754313][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.764894][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.776349][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.786848][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.797826][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.808694][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.827525][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.841967][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.855234][ T7564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.871190][ T7564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.886995][ T7564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.897421][ T7564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.384448][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.392434][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.545417][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.576144][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.605695][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.629195][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.740899][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.768082][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.804163][ T8181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.816366][ T8181] bridge0: port 4(bond3) entered blocking state [ 162.824667][ T8188] x_tables: duplicate underflow at hook 3 [ 162.831606][ T8181] bridge0: port 4(bond3) entered disabled state [ 162.842672][ T8181] bond3: entered allmulticast mode [ 162.851384][ T8181] bond3: entered promiscuous mode [ 162.857039][ T8181] bridge0: port 4(bond3) entered blocking state [ 162.863667][ T8181] bridge0: port 4(bond3) entered forwarding state [ 162.893576][ T5956] bridge0: port 4(bond3) entered disabled state [ 163.105672][ T8196] netlink: 88 bytes leftover after parsing attributes in process `syz.4.474'. [ 163.462532][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.714409][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.875639][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.971341][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.035378][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.046922][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.056645][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.065859][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.075017][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.269901][ T8223] x_tables: unsorted underflow at hook 4 [ 164.317464][ T62] bridge_slave_1: left allmulticast mode [ 164.328059][ T62] bridge_slave_1: left promiscuous mode [ 164.335625][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.360539][ T62] bridge_slave_0: left allmulticast mode [ 164.386633][ T62] bridge_slave_0: left promiscuous mode [ 164.406476][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.769896][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.780335][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.790700][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.799145][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.809520][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.905154][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.916463][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.928535][ T62] bond0 (unregistering): Released all slaves [ 165.186893][ T8249] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 165.243727][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 165.284870][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.485'. [ 165.409259][ T8255] syzkaller0: entered promiscuous mode [ 165.418640][ T8255] syzkaller0: entered allmulticast mode [ 165.472341][ T8249] bond2: entered promiscuous mode [ 165.479174][ T8249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.660201][ T8264] syzkaller1: entered promiscuous mode [ 165.670376][ T8264] syzkaller1: entered allmulticast mode [ 165.845862][ T62] hsr_slave_0: left promiscuous mode [ 165.885160][ T62] hsr_slave_1: left promiscuous mode [ 165.897415][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.910269][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.948917][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.974663][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.021204][ T62] veth1_macvtap: left promiscuous mode [ 166.031875][ T62] veth0_macvtap: left promiscuous mode [ 166.037732][ T62] veth1_vlan: left promiscuous mode [ 166.045454][ T62] veth0_vlan: left promiscuous mode [ 166.128265][ T55] Bluetooth: hci0: command tx timeout [ 166.223845][ T8297] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 166.291468][ T8300] netlink: 'syz.3.494': attribute type 7 has an invalid length. [ 166.304787][ T8300] netlink: 140 bytes leftover after parsing attributes in process `syz.3.494'. [ 166.568674][ T62] team0 (unregistering): Port device team_slave_1 removed [ 166.609406][ T62] team0 (unregistering): Port device team_slave_0 removed [ 166.928453][ T55] Bluetooth: hci3: command tx timeout [ 168.208453][ T55] Bluetooth: hci0: command tx timeout [ 168.354382][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 168.536518][ T8321] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.014942][ T55] Bluetooth: hci3: command tx timeout [ 169.040484][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 169.232864][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 169.367028][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 169.410419][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 169.512357][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.541481][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.556689][ T8218] bridge_slave_0: entered allmulticast mode [ 169.584595][ T8218] bridge_slave_0: entered promiscuous mode [ 169.675878][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.687086][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.694998][ T8218] bridge_slave_1: entered allmulticast mode [ 169.730721][ T8218] bridge_slave_1: entered promiscuous mode [ 169.795076][ T8378] netlink: 64 bytes leftover after parsing attributes in process `syz.3.507'. [ 169.807634][ T8378] netlink: 64 bytes leftover after parsing attributes in process `syz.3.507'. [ 169.879237][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.911060][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.111763][ T8391] xfrm1: entered allmulticast mode [ 170.136050][ T8218] team0: Port device team_slave_0 added [ 170.235651][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.287767][ T8218] team0: Port device team_slave_1 added [ 170.288381][ T55] Bluetooth: hci0: command tx timeout [ 170.309311][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.310239][ T8399] sctp: [Deprecated]: syz.4.512 (pid 8399) Use of int in max_burst socket option deprecated. [ 170.310239][ T8399] Use struct sctp_assoc_value instead [ 170.316967][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.340276][ T8242] bridge_slave_0: entered allmulticast mode [ 170.351792][ T8242] bridge_slave_0: entered promiscuous mode [ 170.361182][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.368982][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.377434][ T8242] bridge_slave_1: entered allmulticast mode [ 170.389532][ T8242] bridge_slave_1: entered promiscuous mode [ 170.401041][ T8403] sctp: [Deprecated]: syz.4.512 (pid 8403) Use of int in max_burst socket option deprecated. [ 170.401041][ T8403] Use struct sctp_assoc_value instead [ 170.482897][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.654926][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.670888][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.682847][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.761861][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.890512][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.910341][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.002237][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.034988][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.042814][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.073458][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.092683][ T55] Bluetooth: hci3: command tx timeout [ 171.164695][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'. [ 171.192271][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 171.270905][ T8242] team0: Port device team_slave_0 added [ 171.292186][ T8242] team0: Port device team_slave_1 added [ 171.484053][ T8218] hsr_slave_0: entered promiscuous mode [ 171.492818][ T8218] hsr_slave_1: entered promiscuous mode [ 171.503665][ T8436] netlink: 808 bytes leftover after parsing attributes in process `syz.0.519'. [ 171.515031][ T8218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.523305][ T8218] Cannot create hsr debugfs directory [ 171.665313][ T8432] netlink: 144 bytes leftover after parsing attributes in process `syz.4.518'. [ 171.693088][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.709206][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.740350][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.784980][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.794825][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.827224][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.172050][ T8242] hsr_slave_0: entered promiscuous mode [ 172.195833][ T8242] hsr_slave_1: entered promiscuous mode [ 172.226099][ T8242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.244833][ T8242] Cannot create hsr debugfs directory [ 172.370681][ T55] Bluetooth: hci0: command tx timeout [ 172.397343][ T62] bridge_slave_1: left allmulticast mode [ 172.408497][ T62] bridge_slave_1: left promiscuous mode [ 172.425570][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.479201][ T62] bridge_slave_0: left allmulticast mode [ 172.484947][ T62] bridge_slave_0: left promiscuous mode [ 172.538298][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.676173][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 173.169837][ T55] Bluetooth: hci3: command tx timeout [ 173.202586][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.215419][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.229124][ T62] bond0 (unregistering): Released all slaves [ 173.876526][ T62] hsr_slave_0: left promiscuous mode [ 173.918293][ T62] hsr_slave_1: left promiscuous mode [ 173.927784][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.937812][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.959387][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.980422][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.007191][ T62] veth1_macvtap: left promiscuous mode [ 174.013443][ T62] veth0_macvtap: left promiscuous mode [ 174.021985][ T62] veth1_vlan: left promiscuous mode [ 174.027324][ T62] veth0_vlan: left promiscuous mode [ 174.437508][ T62] team0 (unregistering): Port device team_slave_1 removed [ 174.481514][ T62] team0 (unregistering): Port device team_slave_0 removed [ 175.083659][ T8539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.293067][ T8548] __nla_validate_parse: 67 callbacks suppressed [ 175.293091][ T8548] netlink: 256 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.297372][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 175.327816][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 175.337441][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 175.483911][ T8551] IPv6: Can't replace route, no match found [ 175.501554][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 176.102566][ T8218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.164345][ T8218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.255796][ T8218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.305773][ T8218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.439236][ T8596] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 176.737213][ T8605] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 176.815378][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 176.835560][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 176.924462][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.952511][ T8242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.004681][ T8242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.062635][ T8242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.112789][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.149483][ T8242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.263988][ T8628] netlink: 108 bytes leftover after parsing attributes in process `syz.4.568'. [ 177.290762][ T8628] netlink: 108 bytes leftover after parsing attributes in process `syz.4.568'. [ 177.305307][ T8628] netlink: 108 bytes leftover after parsing attributes in process `syz.4.568'. [ 177.345121][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.352392][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.447330][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.454605][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.496929][ T8638] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 177.708354][ T8645] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 177.767389][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.875580][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.923684][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.930969][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.975735][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.983042][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.285133][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.483523][ T8218] veth0_vlan: entered promiscuous mode [ 178.547144][ T8218] veth1_vlan: entered promiscuous mode [ 178.677664][ T8218] veth0_macvtap: entered promiscuous mode [ 178.750869][ T8218] veth1_macvtap: entered promiscuous mode [ 178.841754][ T8694] tipc: Started in network mode [ 178.860020][ T8694] tipc: Node identity ffffa848, cluster identity 4711 [ 178.866869][ T8694] tipc: Node number set to 4294944840 [ 178.921323][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.984405][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.017279][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.118141][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.138360][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.155104][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.221239][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.241936][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.268050][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.280400][ T8708] netlink: 'syz.4.585': attribute type 10 has an invalid length. [ 179.287999][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.308468][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.335810][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.357947][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.386011][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.413581][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.451337][ T8708] bridge0: port 3(gretap0) entered disabled state [ 179.458118][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.466954][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.543671][ T8708] bridge0: port 3(gretap0) entered blocking state [ 179.550412][ T8708] bridge0: port 3(gretap0) entered forwarding state [ 179.557426][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.564752][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.572312][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.579596][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.603328][ T8708] bridge0: entered allmulticast mode [ 179.610559][ T8708] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.629051][ T8218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.637806][ T8218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.668860][ T8218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.677630][ T8218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.710048][ T8712] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 180.102458][ T8242] veth0_vlan: entered promiscuous mode [ 180.154774][ T8730] tipc: Resetting bearer [ 180.197386][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.241325][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.281526][ T8242] veth1_vlan: entered promiscuous mode [ 180.444765][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.473023][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.683089][ T8242] veth0_macvtap: entered promiscuous mode [ 180.733625][ T8242] veth1_macvtap: entered promiscuous mode [ 180.804262][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.835567][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.852560][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.864323][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.879446][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.907138][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.917572][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.937255][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.956980][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.042788][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.070263][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.090766][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.103206][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.113865][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.137565][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.155278][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.177117][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.206449][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.292607][ T8242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.302598][ T8242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.314266][ T8242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.323360][ T8786] netlink: 'syz.3.601': attribute type 6 has an invalid length. [ 181.323805][ T8242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.582017][ T5956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.652663][ T8786] netlink: 'syz.3.601': attribute type 2 has an invalid length. [ 181.684889][ T8791] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 181.693277][ T8791] __nla_validate_parse: 2 callbacks suppressed [ 181.693296][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 181.876641][ T5956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.998652][ T5956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.045155][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.057676][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.074189][ T5956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.121238][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.133205][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.255044][ T5956] bridge_slave_1: left allmulticast mode [ 182.262227][ T5956] bridge_slave_1: left promiscuous mode [ 182.268617][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.282325][ T5956] bridge_slave_0: left allmulticast mode [ 182.290558][ T5956] bridge_slave_0: left promiscuous mode [ 182.296441][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.712577][ T8822] sctp: [Deprecated]: syz.4.607 (pid 8822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.712577][ T8822] Use struct sctp_sack_info instead [ 182.899803][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.919371][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.933823][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.942715][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.951693][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.959985][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.967569][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.986113][ T5956] bond0 (unregistering): Released all slaves [ 183.023888][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 183.033359][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 183.048439][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 183.477412][ T5956] hsr_slave_0: left promiscuous mode [ 183.503777][ T5956] hsr_slave_1: left promiscuous mode [ 183.518738][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.526224][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.546785][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.554662][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.576791][ T5956] veth1_macvtap: left promiscuous mode [ 183.582691][ T5956] veth0_macvtap: left promiscuous mode [ 183.588833][ T5956] veth1_vlan: left promiscuous mode [ 183.594192][ T5956] veth0_vlan: left promiscuous mode [ 183.999006][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 184.032926][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 184.228981][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'. [ 184.258090][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 184.267026][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'. [ 184.308510][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'. [ 184.608928][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.618312][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.626066][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.643748][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.653903][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.009647][ T55] Bluetooth: hci0: command tx timeout [ 185.091125][ T8861] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 185.149425][ T8859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.616'. [ 185.177243][ T8857] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 185.223472][ T8871] netlink: 256 bytes leftover after parsing attributes in process `syz.3.619'. [ 185.410849][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 186.025719][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.034468][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.042269][ T8824] bridge_slave_0: entered allmulticast mode [ 186.050690][ T8824] bridge_slave_0: entered promiscuous mode [ 186.151966][ T5956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.224253][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.268570][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.275856][ T8824] bridge_slave_1: entered allmulticast mode [ 186.307423][ T8824] bridge_slave_1: entered promiscuous mode [ 186.421411][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 186.509526][ T5956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.598305][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.627350][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.688467][ T55] Bluetooth: hci3: command tx timeout [ 186.716304][ T5956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.816919][ T8936] __nla_validate_parse: 5 callbacks suppressed [ 186.816949][ T8936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.633'. [ 186.913375][ T5956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.026854][ T8953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 187.027179][ T8824] team0: Port device team_slave_0 added [ 187.036127][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 187.051541][ T8953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 187.060712][ T8953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 187.098095][ T55] Bluetooth: hci0: command tx timeout [ 187.150370][ T8824] team0: Port device team_slave_1 added [ 187.281227][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.294570][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.313254][ T8854] bridge_slave_0: entered allmulticast mode [ 187.336164][ T8854] bridge_slave_0: entered promiscuous mode [ 187.354948][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.365763][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.401473][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.415659][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.436884][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.465080][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.479368][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.496820][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.520113][ T8854] bridge_slave_1: entered allmulticast mode [ 187.534015][ T8854] bridge_slave_1: entered promiscuous mode [ 187.667225][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.685762][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.721465][ T8967] @ÿ: renamed from bond_slave_0 (while UP) [ 187.894542][ T8854] team0: Port device team_slave_0 added [ 187.931942][ T8824] hsr_slave_0: entered promiscuous mode [ 187.941753][ T8824] hsr_slave_1: entered promiscuous mode [ 187.956317][ T8824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.975274][ T8824] Cannot create hsr debugfs directory [ 187.976153][ T8986] tipc: Can't bind to reserved service type 2 [ 187.986603][ T8854] team0: Port device team_slave_1 added [ 188.040427][ T5956] bridge_slave_1: left allmulticast mode [ 188.056299][ T5956] bridge_slave_1: left promiscuous mode [ 188.078225][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.101370][ T5956] bridge_slave_0: left allmulticast mode [ 188.107112][ T5956] bridge_slave_0: left promiscuous mode [ 188.118192][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.478750][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.490470][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.501424][ T5956] bond0 (unregistering): Released all slaves [ 188.517834][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.525575][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.552229][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.572862][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.586261][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.613118][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.773892][ T55] Bluetooth: hci3: command tx timeout [ 189.014170][ T8854] hsr_slave_0: entered promiscuous mode [ 189.028718][ T8854] hsr_slave_1: entered promiscuous mode [ 189.029784][ T9005] Cannot find del_set index 65531 as target [ 189.038691][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.051635][ T8854] Cannot create hsr debugfs directory [ 189.169471][ T55] Bluetooth: hci0: command tx timeout [ 189.366092][ T5956] hsr_slave_0: left promiscuous mode [ 189.376019][ T5956] hsr_slave_1: left promiscuous mode [ 189.392327][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.404944][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.537007][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.547446][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.600213][ T5956] veth1_macvtap: left promiscuous mode [ 189.606285][ T5956] veth0_macvtap: left promiscuous mode [ 189.638802][ T5956] veth1_vlan: left promiscuous mode [ 189.644657][ T5956] veth0_vlan: left promiscuous mode [ 190.124432][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 190.163656][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 190.584656][ T9017] pimreg: entered allmulticast mode [ 190.654273][ T9031] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 190.669312][ T9031] syzkaller0: Linktype set failed because interface is up [ 190.754923][ T5949] syzkaller0: tun_net_xmit 76 [ 190.775903][ T5949] syzkaller0: tun_net_xmit 48 [ 190.781211][ T5919] syzkaller0: tun_net_xmit 76 [ 190.848488][ T55] Bluetooth: hci3: command tx timeout [ 190.908468][ T5919] syzkaller0: tun_net_xmit 76 [ 191.248870][ T55] Bluetooth: hci0: command tx timeout [ 191.829573][ T9045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 191.868445][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 191.888585][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 192.929518][ T55] Bluetooth: hci3: command tx timeout [ 192.932134][ T8824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.964028][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 193.011711][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 193.026259][ T8824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.043636][ T8824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.085344][ T8824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.131993][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.673'. [ 193.142945][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.673'. [ 193.153391][ T9092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.673'. [ 193.525012][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.581561][ T8854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.592429][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 193.627295][ T8854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.652470][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.701851][ T8854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.733455][ T8854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.754238][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.761496][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.785762][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.793010][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.941306][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 194.062929][ T9121] xt_CT: No such helper "pptp" [ 194.091679][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.134850][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.175173][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.176026][ T9130] sctp: [Deprecated]: syz.0.684 (pid 9130) Use of int in max_burst socket option. [ 194.176026][ T9130] Use struct sctp_assoc_value instead [ 194.182417][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.230890][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.238126][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.372480][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379875][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.449685][ T9140] lo speed is unknown, defaulting to 1000 [ 194.483007][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.502643][ T9140] lo speed is unknown, defaulting to 1000 [ 194.517412][ T9140] lo speed is unknown, defaulting to 1000 [ 194.809793][ T8824] veth0_vlan: entered promiscuous mode [ 194.881655][ T9140] infiniband syz0: set active [ 194.892469][ T8824] veth1_vlan: entered promiscuous mode [ 194.908019][ T9140] infiniband syz0: added lo [ 194.945476][ T47] lo speed is unknown, defaulting to 1000 [ 195.062124][ T8824] veth0_macvtap: entered promiscuous mode [ 195.091259][ T9140] RDS/IB: syz0: added [ 195.096100][ T9140] smc: adding ib device syz0 with port count 1 [ 195.108161][ T9140] smc: ib device syz0 port 1 has pnetid [ 195.120107][ T10] lo speed is unknown, defaulting to 1000 [ 195.157531][ T8824] veth1_macvtap: entered promiscuous mode [ 195.173400][ T9140] lo speed is unknown, defaulting to 1000 [ 195.264856][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.301812][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.320738][ T9169] sctp: [Deprecated]: syz.0.690 (pid 9169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.320738][ T9169] Use struct sctp_sack_info instead [ 195.322943][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.357752][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.374039][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.384512][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.400537][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.415835][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.469839][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.501905][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.528017][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.559684][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.580572][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.604431][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.626889][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.676322][ T8824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.703134][ T8824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.713331][ T8824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.724264][ T8824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.762104][ T9180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.694'. [ 195.771828][ T9140] lo speed is unknown, defaulting to 1000 [ 195.970114][ T8854] veth0_vlan: entered promiscuous mode [ 196.030313][ T8854] veth1_vlan: entered promiscuous mode [ 196.056473][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.087830][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.222661][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.257975][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.982841][ T9140] lo speed is unknown, defaulting to 1000 [ 199.079770][ T8854] veth0_macvtap: entered promiscuous mode [ 199.130517][ T8854] veth1_macvtap: entered promiscuous mode [ 199.195716][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.217084][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.238711][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.250375][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.264116][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.274799][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.285076][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.295921][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.306370][ T9205] __nla_validate_parse: 4 callbacks suppressed [ 199.306392][ T9205] netlink: 112 bytes leftover after parsing attributes in process `syz.0.700'. [ 199.323953][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.341138][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.357804][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.368194][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.379127][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.389328][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.401593][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.413956][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.424769][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.437133][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.462150][ T9140] lo speed is unknown, defaulting to 1000 [ 199.472822][ T9206] netlink: 'syz.3.699': attribute type 12 has an invalid length. [ 199.497468][ T9206] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 199.525227][ T9206] netlink: 148 bytes leftover after parsing attributes in process `syz.3.699'. [ 199.541003][ T9206] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 199.551545][ T9206] netlink: 43 bytes leftover after parsing attributes in process `syz.3.699'. [ 199.605690][ T8854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.618207][ T8854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.647547][ T8854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.667720][ T8854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.905577][ T5966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.959236][ T9140] lo speed is unknown, defaulting to 1000 [ 199.966330][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.982243][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.096580][ T5966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.244383][ T5966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.268979][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.276866][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.342188][ T5966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.541488][ T5966] bridge_slave_1: left allmulticast mode [ 200.547200][ T5966] bridge_slave_1: left promiscuous mode [ 200.553250][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.565113][ T5966] bridge_slave_0: left allmulticast mode [ 200.571511][ T5966] bridge_slave_0: left promiscuous mode [ 200.577281][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.063892][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.078468][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.095938][ T5966] bond0 (unregistering): Released all slaves [ 201.198350][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.206988][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.217277][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.230924][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.240168][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.290714][ T9222] lo speed is unknown, defaulting to 1000 [ 201.551738][ T9229] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 201.718446][ T9228] syzkaller1: entered promiscuous mode [ 201.734431][ T9228] syzkaller1: entered allmulticast mode [ 202.154425][ T5966] hsr_slave_0: left promiscuous mode [ 202.180714][ T5966] hsr_slave_1: left promiscuous mode [ 202.189454][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.197517][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.200111][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.214147][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.221954][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.230473][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.240665][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.249426][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.257204][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.299744][ T5966] veth1_macvtap: left promiscuous mode [ 202.305480][ T5966] veth0_macvtap: left promiscuous mode [ 202.311438][ T5966] veth1_vlan: left promiscuous mode [ 202.319051][ T5966] veth0_vlan: left promiscuous mode [ 202.431873][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.709'. [ 202.842276][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 202.881183][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 203.328443][ T5856] Bluetooth: hci0: command tx timeout [ 203.410280][ T9251] lo speed is unknown, defaulting to 1000 [ 203.418757][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 203.631678][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 203.869938][ T9282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.933707][ T9281] syz_tun: entered promiscuous mode [ 203.949806][ T9281] syz_tun: left promiscuous mode [ 204.093071][ T9282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.251318][ T9282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.288625][ T5856] Bluetooth: hci3: command tx timeout [ 204.301467][ T5834] lo speed is unknown, defaulting to 1000 [ 204.333169][ T9282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.353370][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.360926][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.368622][ T9222] bridge_slave_0: entered allmulticast mode [ 204.376054][ T9315] netlink: 148 bytes leftover after parsing attributes in process `syz.4.719'. [ 204.376554][ T9222] bridge_slave_0: entered promiscuous mode [ 204.395051][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.405324][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.412856][ T9222] bridge_slave_1: entered allmulticast mode [ 204.420580][ T9222] bridge_slave_1: entered promiscuous mode [ 204.541492][ T9318] Bluetooth: MGMT ver 1.23 [ 204.559820][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.592557][ T9318] netlink: 72 bytes leftover after parsing attributes in process `syz.3.721'. [ 204.606728][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.719926][ T5966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.784815][ T9327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.723'. [ 204.816104][ T9282] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.862652][ T5966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.920918][ T9222] team0: Port device team_slave_0 added [ 204.931976][ T9222] team0: Port device team_slave_1 added [ 204.993835][ T9282] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.020659][ T9282] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.138293][ T5966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.167391][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.185961][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.215608][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.245939][ T9282] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.285025][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 205.322541][ T5966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.347565][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.356121][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.390934][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.411434][ T5856] Bluetooth: hci0: command tx timeout [ 205.468276][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 205.635888][ T9222] hsr_slave_0: entered promiscuous mode [ 205.661490][ T9222] hsr_slave_1: entered promiscuous mode [ 205.691576][ T9222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.702742][ T9222] Cannot create hsr debugfs directory [ 205.828382][ T9360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.053320][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 206.131904][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.139311][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.146669][ T9251] bridge_slave_0: entered allmulticast mode [ 206.155730][ T9251] bridge_slave_0: entered promiscuous mode [ 206.172945][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.181012][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.189968][ T9251] bridge_slave_1: entered allmulticast mode [ 206.198582][ T9251] bridge_slave_1: entered promiscuous mode [ 206.258397][ T9374] netlink: 'syz.4.738': attribute type 30 has an invalid length. [ 206.302229][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 206.314669][ T9374] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 206.326809][ T9374] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 206.357792][ T5966] bridge_slave_1: left allmulticast mode [ 206.370093][ T5856] Bluetooth: hci3: command tx timeout [ 206.374168][ T5966] bridge_slave_1: left promiscuous mode [ 206.406410][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.447735][ T5966] bridge_slave_0: left allmulticast mode [ 206.478284][ T5966] bridge_slave_0: left promiscuous mode [ 206.500808][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.923978][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.935328][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.946025][ T5966] bond0 (unregistering): Released all slaves [ 206.972749][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.044103][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.181956][ T9251] team0: Port device team_slave_0 added [ 207.241572][ T9251] team0: Port device team_slave_1 added [ 207.358226][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.365253][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.393754][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.428366][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.435374][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.463587][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.491523][ T5856] Bluetooth: hci0: command tx timeout [ 207.584401][ T9409] netlink: 80 bytes leftover after parsing attributes in process `syz.3.745'. [ 207.604634][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 207.707607][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.747'. [ 207.806032][ T9251] hsr_slave_0: entered promiscuous mode [ 207.826069][ T9251] hsr_slave_1: entered promiscuous mode [ 207.834438][ T9251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.842583][ T9251] Cannot create hsr debugfs directory [ 207.854577][ T9413] 8021q: VLANs not supported on ip6gre0 [ 207.904466][ T5966] hsr_slave_0: left promiscuous mode [ 207.922488][ T5966] hsr_slave_1: left promiscuous mode [ 207.929936][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.938458][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.947477][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.956397][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.982029][ T5966] veth1_macvtap: left promiscuous mode [ 207.987747][ T5966] veth0_macvtap: left promiscuous mode [ 207.993738][ T5966] veth1_vlan: left promiscuous mode [ 207.999232][ T5966] veth0_vlan: left promiscuous mode [ 208.047371][ T9425] sctp: [Deprecated]: syz.4.749 (pid 9425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.047371][ T9425] Use struct sctp_sack_info instead [ 208.401056][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 208.438149][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 208.461728][ T5856] Bluetooth: hci3: command tx timeout [ 209.096093][ T9432] netlink: 'syz.4.752': attribute type 8 has an invalid length. [ 209.245202][ T9222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.313855][ T9222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.366349][ T9447] netlink: 9 bytes leftover after parsing attributes in process `syz.3.755'. [ 209.415276][ T9222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.422744][ T9442] __nla_validate_parse: 1 callbacks suppressed [ 209.422766][ T9442] netlink: 5 bytes leftover after parsing attributes in process `syz.3.755'. [ 209.470943][ T9222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.506421][ T9447] gretap0: entered promiscuous mode [ 209.533414][ T9442] 0ªî{X¹¦: renamed from gretap0 [ 209.541485][ T9442] 0ªî{X¹¦: left promiscuous mode [ 209.546932][ T9442] 0ªî{X¹¦: entered allmulticast mode [ 209.568633][ T5856] Bluetooth: hci0: command 0x0419 tx timeout [ 209.576130][ T9442] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 209.633217][ T9455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.759'. [ 209.710682][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 209.748102][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 210.043776][ T9463] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 210.070169][ T9466] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 210.073378][ T9463] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.110009][ T9463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.117328][ T9463] IPv6: NLM_F_CREATE should be set when creating new route [ 210.124700][ T9463] IPv6: NLM_F_CREATE should be set when creating new route [ 210.132033][ T9463] IPv6: NLM_F_CREATE should be set when creating new route [ 210.205474][ T9472] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 210.232864][ T9468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.763'. [ 210.362929][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.433532][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.457551][ T9472] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 210.479303][ T9472] netlink: 224 bytes leftover after parsing attributes in process `syz.0.765'. [ 210.542423][ T5843] Bluetooth: hci3: command tx timeout [ 210.546856][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.555071][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.588871][ T9485] netlink: 116 bytes leftover after parsing attributes in process `syz.3.768'. [ 210.634767][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.642039][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.724007][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 210.793722][ T9251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.876778][ T9251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.894747][ T9251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.903537][ T9491] set match dimension is over the limit! [ 210.959986][ T9251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.985285][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 211.020626][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 211.291672][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.414351][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.455865][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.463120][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.531877][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.539136][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.584230][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.648816][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 211.742806][ T9222] veth0_vlan: entered promiscuous mode [ 211.774125][ T9222] veth1_vlan: entered promiscuous mode [ 211.811901][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.830281][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 211.836410][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 211.986090][ T9222] veth0_macvtap: entered promiscuous mode [ 212.017218][ T9222] veth1_macvtap: entered promiscuous mode [ 212.056948][ T9536] netlink: 'syz.4.784': attribute type 16 has an invalid length. [ 212.079210][ T9536] netlink: 'syz.4.784': attribute type 17 has an invalid length. [ 212.147723][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.177563][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.213126][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.224145][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.234973][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.246762][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.266503][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.303771][ T9548] pim6reg: entered allmulticast mode [ 212.322355][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.336890][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.350770][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.361508][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.378203][ T9222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.398010][ T9222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.420805][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.433251][ T9542] pim6reg: left allmulticast mode [ 212.504803][ T9222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.517485][ T9222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.531991][ T9222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.541709][ T9222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.573314][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.692235][ T9565] netlink: 'syz.4.793': attribute type 21 has an invalid length. [ 212.701575][ T9565] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.823767][ T9570] sctp: [Deprecated]: syz.3.792 (pid 9570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.823767][ T9570] Use struct sctp_sack_info instead [ 212.906257][ T5841] syz_tun (unregistering): left promiscuous mode [ 212.951852][ T9251] veth0_vlan: entered promiscuous mode [ 212.957617][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.971573][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.067303][ T5949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.077122][ T5949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.090193][ T9251] veth1_vlan: entered promiscuous mode [ 213.172385][ T9580] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 213.192437][ T5967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.373087][ T5967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.419970][ T9251] veth0_macvtap: entered promiscuous mode [ 213.445191][ T9247] ------------[ cut here ]------------ [ 213.451092][ T9247] refcount_t: underflow; use-after-free. [ 213.457198][ T9247] WARNING: CPU: 1 PID: 9247 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 213.467274][ T9247] Modules linked in: [ 213.471782][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: kbnepd bnep0 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 213.484091][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.494679][ T9247] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 213.500902][ T9247] Code: e0 69 a1 8c e8 17 12 7e fc 90 0f 0b 90 90 eb 99 e8 9b b6 be fc c6 05 0a d4 45 0b 01 90 48 c7 c7 40 6a a1 8c e8 f7 11 7e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 b6 be fc c6 05 e4 d3 45 0b 01 90 [ 213.520715][ T9247] RSP: 0018:ffffc90003c27700 EFLAGS: 00010246 [ 213.526791][ T9247] RAX: 78e1693d15ea0a00 RBX: ffff888011e86478 RCX: ffff88807c63da00 [ 213.534797][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.542922][ T9247] RBP: 0000000000000003 R08: ffffffff818218d2 R09: 1ffff110170e47d2 [ 213.550951][ T9247] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: ffff888011e86460 [ 213.559022][ T9247] R13: 1ffff110023d0c8c R14: ffff888011e86460 R15: ffffffff864ed640 [ 213.567521][ T9247] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 213.576980][ T9247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.583640][ T9247] CR2: 00007f120f797108 CR3: 00000000717c2000 CR4: 00000000003526f0 [ 213.591685][ T9247] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.599749][ T9247] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.607736][ T9247] Call Trace: [ 213.611107][ T9247] [ 213.614047][ T9247] klist_dec_and_del+0x3ec/0x3f0 [ 213.619095][ T9247] ? __pfx_klist_children_put+0x10/0x10 [ 213.624662][ T9247] klist_del+0xa7/0x110 [ 213.628855][ T9247] device_del+0x2cb/0x9b0 [ 213.633188][ T9247] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 213.639356][ T9247] ? __pfx_device_del+0x10/0x10 [ 213.644219][ T9247] ? netdev_unregister_kobject+0x36b/0x470 [ 213.650224][ T9247] unregister_netdevice_many_notify+0x2069/0x2640 [ 213.656692][ T9247] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 213.663574][ T9247] ? __mutex_lock+0xbe3/0x10c0 [ 213.668977][ T9247] ? __mutex_lock+0x5f3/0x10c0 [ 213.673774][ T9247] ? __pfx___mutex_lock+0x10/0x10 [ 213.679250][ T9247] unregister_netdevice_queue+0x383/0x400 [ 213.684985][ T9247] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 213.691280][ T9247] ? rtnl_net_dev_lock+0x37/0x320 [ 213.696317][ T9247] ? rtnl_net_dev_lock+0x302/0x320 [ 213.701489][ T9247] ? rtnl_net_dev_lock+0x37/0x320 [ 213.706523][ T9247] unregister_netdev+0x1f/0x60 [ 213.711315][ T9247] bnep_session+0x2e52/0x3050 [ 213.715998][ T9247] ? __schedule+0x1ba6/0x5240 [ 213.720765][ T9247] ? __lock_acquire+0xad5/0xd80 [ 213.725624][ T9247] ? do_raw_spin_lock+0x151/0x370 [ 213.730847][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 213.735891][ T9247] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 213.741833][ T9247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.748237][ T9247] ? __pfx_woken_wake_function+0x10/0x10 [ 213.753882][ T9247] ? __kthread_parkme+0x1a8/0x200 [ 213.758968][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 213.764000][ T9247] kthread+0x7b7/0x940 [ 213.768641][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 213.773703][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.778714][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.783318][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.787965][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.792564][ T9247] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.797769][ T9247] ? lockdep_hardirqs_on+0x9d/0x150 [ 213.803059][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.807652][ T9247] ret_from_fork+0x4b/0x80 [ 213.812328][ T9247] ? __pfx_kthread+0x10/0x10 [ 213.816930][ T9247] ret_from_fork_asm+0x1a/0x30 [ 213.821761][ T9247] [ 213.824781][ T9247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.832068][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: kbnepd bnep0 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 213.844226][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.854278][ T9247] Call Trace: [ 213.857555][ T9247] [ 213.860496][ T9247] dump_stack_lvl+0x241/0x360 [ 213.865194][ T9247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.870395][ T9247] ? __pfx__printk+0x10/0x10 [ 213.874994][ T9247] ? vscnprintf+0x5d/0x90 [ 213.879348][ T9247] panic+0x349/0x880 [ 213.883258][ T9247] ? __warn+0x174/0x4d0 [ 213.887430][ T9247] ? __pfx_panic+0x10/0x10 [ 213.891856][ T9247] ? ret_from_fork_asm+0x1a/0x30 [ 213.896793][ T9247] __warn+0x344/0x4d0 [ 213.900788][ T9247] ? refcount_warn_saturate+0x15a/0x1d0 [ 213.906338][ T9247] report_bug+0x2b3/0x500 [ 213.910672][ T9247] ? refcount_warn_saturate+0x15a/0x1d0 [ 213.916215][ T9247] ? refcount_warn_saturate+0x15a/0x1d0 [ 213.921760][ T9247] ? refcount_warn_saturate+0x15c/0x1d0 [ 213.927327][ T9247] handle_bug+0x89/0x170 [ 213.931599][ T9247] exc_invalid_op+0x1a/0x50 [ 213.936111][ T9247] asm_exc_invalid_op+0x1a/0x20 [ 213.940968][ T9247] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 213.947168][ T9247] Code: e0 69 a1 8c e8 17 12 7e fc 90 0f 0b 90 90 eb 99 e8 9b b6 be fc c6 05 0a d4 45 0b 01 90 48 c7 c7 40 6a a1 8c e8 f7 11 7e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 b6 be fc c6 05 e4 d3 45 0b 01 90 [ 213.966786][ T9247] RSP: 0018:ffffc90003c27700 EFLAGS: 00010246 [ 213.972858][ T9247] RAX: 78e1693d15ea0a00 RBX: ffff888011e86478 RCX: ffff88807c63da00 [ 213.980828][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.988795][ T9247] RBP: 0000000000000003 R08: ffffffff818218d2 R09: 1ffff110170e47d2 [ 213.996779][ T9247] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: ffff888011e86460 [ 214.004775][ T9247] R13: 1ffff110023d0c8c R14: ffff888011e86460 R15: ffffffff864ed640 [ 214.012842][ T9247] ? __pfx_klist_children_put+0x10/0x10 [ 214.018414][ T9247] ? __warn_printk+0x2a2/0x360 [ 214.023191][ T9247] klist_dec_and_del+0x3ec/0x3f0 [ 214.028134][ T9247] ? __pfx_klist_children_put+0x10/0x10 [ 214.033685][ T9247] klist_del+0xa7/0x110 [ 214.037845][ T9247] device_del+0x2cb/0x9b0 [ 214.042192][ T9247] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 214.048312][ T9247] ? __pfx_device_del+0x10/0x10 [ 214.053366][ T9247] ? netdev_unregister_kobject+0x36b/0x470 [ 214.059201][ T9247] unregister_netdevice_many_notify+0x2069/0x2640 [ 214.065659][ T9247] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 214.072519][ T9247] ? __mutex_lock+0xbe3/0x10c0 [ 214.077309][ T9247] ? __mutex_lock+0x5f3/0x10c0 [ 214.082087][ T9247] ? __pfx___mutex_lock+0x10/0x10 [ 214.087202][ T9247] unregister_netdevice_queue+0x383/0x400 [ 214.092923][ T9247] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 214.099169][ T9247] ? rtnl_net_dev_lock+0x37/0x320 [ 214.104211][ T9247] ? rtnl_net_dev_lock+0x302/0x320 [ 214.109342][ T9247] ? rtnl_net_dev_lock+0x37/0x320 [ 214.114454][ T9247] unregister_netdev+0x1f/0x60 [ 214.119237][ T9247] bnep_session+0x2e52/0x3050 [ 214.123940][ T9247] ? __schedule+0x1ba6/0x5240 [ 214.128627][ T9247] ? __lock_acquire+0xad5/0xd80 [ 214.133500][ T9247] ? do_raw_spin_lock+0x151/0x370 [ 214.138535][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 214.143560][ T9247] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 214.149460][ T9247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.155825][ T9247] ? __pfx_woken_wake_function+0x10/0x10 [ 214.161476][ T9247] ? __kthread_parkme+0x1a8/0x200 [ 214.166509][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 214.171535][ T9247] kthread+0x7b7/0x940 [ 214.175605][ T9247] ? __pfx_bnep_session+0x10/0x10 [ 214.180637][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.185227][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.189828][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.194416][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.199005][ T9247] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.204338][ T9247] ? lockdep_hardirqs_on+0x9d/0x150 [ 214.210007][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.214631][ T9247] ret_from_fork+0x4b/0x80 [ 214.219080][ T9247] ? __pfx_kthread+0x10/0x10 [ 214.223685][ T9247] ret_from_fork_asm+0x1a/0x30 [ 214.228495][ T9247] [ 215.359579][ T9247] Shutting down cpus with NMI [ 215.364606][ T9247] Kernel Offset: disabled [ 215.368940][ T9247] Rebooting in 86400 seconds..