last executing test programs: 1m12.739448651s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m0.111939609s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 50.256735311s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 36.146968338s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 24.724721964s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 10.946853492s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 9.395610062s ago: executing program 0 (id=3850): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000380)={0xa0000001}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 8.0180522s ago: executing program 2 (id=3856): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000380)={0xa0000001}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 7.653241903s ago: executing program 0 (id=3859): r0 = socket$tipc(0x1e, 0x6, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='syzkaller0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x2, 0x12, 0x0, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e20}]}, 0x18}}, 0x40080) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1620}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004400c}, 0x844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x1c, 0x21, 0x11}, 0x1c}}, 0x0) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0x2d, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r7, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="6870f038c53094b1edfba05540c3fbcd107be1021bad83bb6e88af42b2e2209284b03a6d4aa2cf5b65c8e62309de960fc279cfddc119510b1f899581ada38248cc6f0997e197bf09e647a8f8ce802fcb833ea90711ab59a9beac79fa634d8a276466790a3a4c7ae040e9ad09d5b859830cb8a93fe75021f316756e345200a6d0f0bc1015371f443b2e6f6bc17dcec3dee88f320459b9981109bd5c6e7704d68e4c271d3a13063860877edf38ab9067e70806", 0xb2}, {&(0x7f0000000c40)="7c8a365265b40ce966bf4b65964dc9d76c26a0017060951f978b718294105e13246c91bf165fa99f6806c287a004267de0175bd7e0b7995ad4e02b9033236a4b4ee49b8ae8ee95d1776da62d402b9a66fe288f3ee52a597f5ce675918601a1d9104522765fb803b7c7024db0c4f42a8b3a5370258709c2e2cfad1559326a7d2e0e81a261b7b1bde7829c8cc2d02b511858f77bcae5ac7ff334b5444424ed8008233430ff955b8315a70abbfe162b316ff6c433482594e5d03f1578435fbc46fb7b161e05", 0xc4}, {&(0x7f0000001180)="40b45d991c3dbecd3dfbd178ebd3837571244b7fe8a505456fd09154c6ce3ed4947da069d7b23b4f667650656ae46eb7c393e09b025cbbf580956bb303d7d565ce6aab2bee9137146f50db0e31a6c23afeb1fdb62250c5aba7ac9a987947760d4122924bb15ade5d0d67cb6f2992065f2fa8b106c7c29e7d5a816c7cc3396ec9626cbf7914221ddffad4d81e70095110cdd407a6f2dddfe05248cac3a390594920e3d17d8a6bc9d3ec893730bb78deea6f2a9696ddf4f5a136a9a130550c8daf8211056d5e57193f7fd90c88526d4bc0aa4c1f748a3fc111bb4aab090d8ffd53b155e71eb4355db2b19cd5212b9fea9b4710751a36e01947dff2b132bcf86746c8f1d19a297dcd07e9cad67ce6eb912036d7c42013ec1b80e78e06f10180543119f46d17eff13de6dd2eda779c6fc70c55c34923a780b94dfac01f0e11e4dfd2044dba45027c66f542fb75ab9db0e1ab1e28edb7e397d11f659043f1849fda143ba582ee723365fccbebe8c808e408f4dc05017adbe45f3717a579d52d85007d630536fd2ee4fdb18393e1f4faa371195aca54c7809aabe25b850a2b8324163b768c206d3d3fa7b64c79e8cc34032579e1ac5554129ac9dcf7591af7471a217e5376ed1e37e21b72814d0478100da6e883623c96a082c2658d6375967040021d3818f34db4b6da280fe4daeaee38e97db097cb79a4b6d636c3f6bf4c81e4a2a2634a5e25df2b0aa4813362d7b9c5ba491675062bcc93fbfb156b6c383498a978a2d26386f03e3e33d9de0ad0d6ae004765ce38b13cdd72450a125ed90cf7f3dcb4607f483ad3b22843bef46833a5c9b0111ac6fea4bfc36270591a7b19b40822607bc20af5a2640e1a36092ec507154b3886256b937779d4cd5c40af9646b99d717c6ed92d1633c6ae670ae3b99b3cc31043a13959e9d97d47ee47e5cbd009408406f54259b7af1a3237933cd1455f15ed744242bd02eb4e63e7116213aa11679c73f806aff1f8d744c3c943894d795126047db4e0d55f75f3edc9c8b17fd7085543dc51b8be61bd396582e5a0c251cff13fbfe52b94962d70d9a77d7a48820a61811555e46e8ac3c0fa277ac460cf12cdf9e03c19d5cc404d2263b8e347753c5a1be26583e6d27ad521f4bfa57f5954c5c247eec6b250f97d85e71860d302b19d4decede6998f23e2df348a78f7933aed297bb628531b921bf5f1b1609bec92a2e3b4ef7c72c6ad2c47d50166aad43ef9249bd5f610234c9d21270aaf19392e3fa59e155dd15e5602a7d4dc1e5e520e61bba01659e6632d86ce761cc8996e4111cb88a4b5c0df1c79bc9ae495ad7b276972bed9d92bd714ab762918dcab5a9bba6f62b57622ffb63a4baf19461c9eed6d9deed3eb0e290f7cbd98f6c98acbdd575d01ab98dd87e308d5e1c46b229931d2a90b5ceb64a1bd424491050ab6fec85c12acfc25d24ae3a659a6dc81a0c164b6b6d627f0ae4a821cdbf16e94e6df2288ba17181e35474d8d529a74c68a30f99f97b183e7454b5fde4ab86500a89d916db80ffba4a1da5fdd586f", 0x44b}], 0x3}}], 0x1, 0x0) unshare(0x44000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffb7b, 0x3, 0x4, 0xff}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000012091102000000000000000007000000de59a1002bc1b20e69b5e0745f8bd475eed10415947c3a84753459145c5c348d4c9f6c63ebb97435088c115e99be56457597bbac8038ad1067cb5c4fbd7aae27fbc8277cd54c36360ea92281e7adb2164aa7ce02db31aa2901cb11e3a31d58002b7c7b4a6a53c6fa817c2731b83044f93d93b5ecf2ae55eb7603418a4691de9988db2841521379af996aa0939b6f878c4bc43016ce54b87164685740ae7bf94330a815cbd9f00729684eb19326955e6031a61793f5f03facf28b84d3ac2ad21e75b3a5f67380f62b12f5ab29177e5bbc348ad9d36224e8913d99e395f2ba65c6065236c6cc3476ecf3ad8559e9884874069bd47ca2235518b15f1bc3d502f76e2cd4a0067cf358db11276dfb53ae"], 0x24}, 0x1, 0x0, 0x0, 0x891}, 0x4000) 6.537960571s ago: executing program 2 (id=3860): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1800000042000106000000000000000008de"], 0x18}], 0x1}, 0x0) unshare(0x68040200) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r5, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="130000906acc00000001000000000000000000000000002c1262553f157a1aec67bc8e6df9c34c770bae09edb444e3255c7b080000079453fb550820eb1ce8ad61b0e2d722b54d06128001001c816ea4ecf7a7f1537d409981c407ce7b907b49b4819f0905ebb3bcd27dc776e8d7932c118b6a51419d0e7c3133d809050e264a5f052aef6449baa7a6f1db55dffa1f103f9b4a014c73f930e7c88454d33095a88e1c0c5e77ce6f91d78208cb89e0ce3b4720f68408e4", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c8e907ed02a535351511e60a1e55c09251d104a8a632e12e567de1231bb569bd8fc16cb8999046889ca4d1b5d1d35988cecb17dcb2991eb29bbb30b3ed6ffd05f9b3ae059361866ac53de583e29aee2f6ef45066ff46e77e9c9c4f7c8cffcce25c08a95a5c81a4542b8f52177606e51c6009f1df0e3e483d2a93fae8fd899feb38bcc8108d6a7099acdd3d11a28b6ab061956a319185daa4926ac5afb1284c5eb4f69957975b63644eaab4fb32", @ANYRES64=r0, @ANYRES32, @ANYRES32=r0], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="5daa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) syz_emit_ethernet(0x5a, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0xc, 0x2, 0x0, 0x0, 0x0, 0x66, 0x3, 0x0, 0x2f, 0x8, @loopback, @loopback, {[@cipso={0x86, 0x18, 0x8f2912b07d67aa1a, [{0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5, "ac7aee"}, {0x1, 0x9, "472a79ac1921ec"}]}, @end, @end]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.930777784s ago: executing program 0 (id=3868): socket$kcm(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000002a4b25c63945f0de74c83558cbc071e7d58a6daf066f6cb3427e9d8e9d9e2bae4aea8cf809e62a2ba1047287486aac417d42502b3abc9730ff10b486f18514d42261e0e8714f8b68701ed6a1167bd16cb544c3dcf30b6a0bff179b0dc3921c1e6deb12e0945de70637a59fc10a8efbeab55acfa81edc5e4a8f052609", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r4, 0x0, &(0x7f0000000bc0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='xprtrdma_dma_maperr\x00', r5}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r6}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 4.003982556s ago: executing program 0 (id=3873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd811200000000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.436037367s ago: executing program 4 (id=3878): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089121a000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) 3.270332246s ago: executing program 4 (id=3879): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x7}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000008000000000000001a0000000000"], 0x48) r3 = accept(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000900)=0x5, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @bcast, 0x2, 0x5, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000180)="013d0338d7d543319402aea2fdae9112378deb90da2d69a3af0200000024") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f0000000540), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.042643923s ago: executing program 4 (id=3882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.953114451s ago: executing program 0 (id=3883): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x4220, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x107, 0x11, 0x0, 0x20000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xc, 0x4, 0x2, 0x2b, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7d, [@empty, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) socket$inet6(0xa, 0x80003, 0xff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1391697c1f011d052c56c847ac633200fd8981740b222f90217d04d008a2727a07f635e086941df2f4b5df79b9ea8b38cf5b1b25e90f83433c0f3cf7ca392fbb57fd73f5cec59db2476e385810b122bac39db42c61fe0938cee39312f9fbd2be6b"], 0x7c}}, 0x48009) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008002c000c00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.852050326s ago: executing program 4 (id=3884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000140)="c5cbff3b2e626ab0f365245510bf38c7fcf9f78fdad9e04464", 0x19, 0x3b00, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800800084000000020060004400000000006000540"], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.845102842s ago: executing program 2 (id=3885): socket$kcm(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000002a4b25c63945f0de74c83558cbc071e7d58a6daf066f6cb3427e9d8e9d9e2bae4aea8cf809e62a2ba1047287486aac417d42502b3abc9730ff10b486f18514d42261e0e8714f8b68701ed6a1167bd16cb544c3dcf30b6a0bff179b0dc3921c1e6deb12e0945de70637a59fc10a8efbeab55acfa81edc5e4a8f052609", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r4, 0x0, &(0x7f0000000bc0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='xprtrdma_dma_maperr\x00', r5}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r6}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 2.019751702s ago: executing program 3 (id=3887): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, @local}, 0xc) 1.872814661s ago: executing program 2 (id=3888): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.816389706s ago: executing program 3 (id=3889): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711205000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.750759023s ago: executing program 4 (id=3890): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000)='\x00\t\x00', 0x39, 0x10, 0x0, 0x0) 1.724026147s ago: executing program 2 (id=3891): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3a1, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0x8, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x140a, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001"], 0x6c}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103"], 0x34}}, 0x0) recvmsg(r5, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x10002) 1.644441694s ago: executing program 3 (id=3892): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 1.544257452s ago: executing program 4 (id=3893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd811200000000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.36311503s ago: executing program 2 (id=3894): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000a00)) unshare(0x62040200) r2 = socket(0x9, 0x40000000002, 0xfffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) epoll_create1(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x200020000a84, 0xffffffffffffffff, 0x70000002, 0x200002b0, 0x200000200002e0, 0x3], 0x2, 0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r1, @ANYRES64=r4, @ANYBLOB="7e064b47af15a5cbdd4462a408023b2999022bd525f59335a95c7ad08c5d86a42a6a5b8ef6a1275e57ea8381eed4735d284cbb612346a93e46403f494b54f95acd3b91448758f5554c468550bef0e9bd5bff79da70da0ff08f5bc20d9d45844a983fddd7bceb55c4464409a3c10fee019d793acf336138da3ffbfac21dc25e4cfebe5bf3c1609af19aa9"]}, 0x11c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 1.362760435s ago: executing program 3 (id=3895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.092268346s ago: executing program 3 (id=3896): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r8, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) socket$nl_xfrm(0x10, 0x3, 0x6) 852.146274ms ago: executing program 3 (id=3897): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='7\x00'], 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000"], 0xffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x20000007) 0s ago: executing program 0 (id=3898): unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x7}, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00007200000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="7c20000013ada80a"], &(0x7f00000003c0)='syzkaller\x00', 0x200, 0x21, &(0x7f0000000400)=""/33, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x3, 0x6, 0x876b}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], &(0x7f00000007c0)=[{0x5, 0x3, 0x3, 0x4}, {0x1, 0x5, 0x7, 0x8}, {0x0, 0x1, 0x9, 0x3}, {0x2, 0x5, 0xe, 0x5}, {0x4, 0x3, 0x8, 0x8}, {0x0, 0x2, 0x2, 0x5}, {0x5, 0x3, 0x9, 0x3}, {0x2, 0x3, 0x1}], 0x10, 0x2, @void, @value}, 0x94) close(r5) r8 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0xc000000) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) kernel console output (not intermixed with test programs): 161178][T16936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3190'. [ 544.376556][T16944] pim6reg1: entered promiscuous mode [ 544.385738][T16944] pim6reg1: entered allmulticast mode [ 544.411664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 544.621012][T16957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3197'. [ 545.103995][T16977] syzkaller1: entered promiscuous mode [ 545.110552][T16977] syzkaller1: entered allmulticast mode [ 545.124627][T16977] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 545.442005][T16988] lo speed is unknown, defaulting to 1000 [ 545.451651][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 545.490581][T16991] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3212'. [ 545.751697][T17000] xt_CONNSECMARK: invalid mode: 0 [ 545.782562][T17002] tls_set_device_offload: netdev not found [ 545.789521][T16999] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 545.801757][T16999] syzkaller1: linktype set to 780 [ 545.933740][T16988] lo speed is unknown, defaulting to 1000 [ 545.950852][T16988] lo speed is unknown, defaulting to 1000 [ 545.964647][T16988] lo speed is unknown, defaulting to 1000 [ 546.154193][T17012] netlink: 'syz.3.3222': attribute type 4 has an invalid length. [ 546.181799][T17012] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3222'. [ 546.226448][T17012] lo speed is unknown, defaulting to 1000 [ 546.491668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 546.548743][T17028] batadv_slave_1: entered promiscuous mode [ 546.556334][T17027] batadv_slave_1: left promiscuous mode [ 546.784178][T17012] lo speed is unknown, defaulting to 1000 [ 546.821051][T17012] lo speed is unknown, defaulting to 1000 [ 546.834180][T17012] lo speed is unknown, defaulting to 1000 [ 547.039539][T17049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3233'. [ 547.222745][T17053] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.289468][T17018] ipt_rpfilter: unknown options [ 547.658906][T17060] lo speed is unknown, defaulting to 1000 [ 548.236741][T17067] lo speed is unknown, defaulting to 1000 [ 548.455872][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 548.465590][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.474116][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.484993][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.494054][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 548.505707][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.588793][T17060] lo speed is unknown, defaulting to 1000 [ 548.641343][T17060] lo speed is unknown, defaulting to 1000 [ 548.646749][T17079] lo speed is unknown, defaulting to 1000 [ 548.663816][T17067] lo speed is unknown, defaulting to 1000 [ 548.720159][T17060] lo speed is unknown, defaulting to 1000 [ 548.757763][T17067] lo speed is unknown, defaulting to 1000 [ 548.950688][T17089] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 548.957601][ T68] ip6gretap0 (unregistering): left promiscuous mode [ 549.133486][ T68] erspan0 (unregistering): left promiscuous mode [ 549.157709][ T68] gretap0 (unregistering): left promiscuous mode [ 549.218188][ T68] team0: Port device gtp0 removed [ 549.593053][ T68] bond1 (unregistering): Released all slaves [ 549.732796][ T68] bond2 (unregistering): Released all slaves [ 549.860522][ T68] bond3 (unregistering): Released all slaves [ 549.871321][ T68] bond0 (unregistering): Released all slaves [ 549.881689][T17079] lo speed is unknown, defaulting to 1000 [ 549.888164][T17079] lo speed is unknown, defaulting to 1000 [ 549.902873][T17089] lo speed is unknown, defaulting to 1000 [ 549.906038][T17067] lo speed is unknown, defaulting to 1000 [ 549.991648][ T68] tipc: Disabling bearer [ 550.001987][ T68] tipc: Disabling bearer [ 550.031480][ T68] tipc: Left network mode [ 550.230144][T17079] lo speed is unknown, defaulting to 1000 [ 550.502086][T17089] lo speed is unknown, defaulting to 1000 [ 550.546930][T17089] lo speed is unknown, defaulting to 1000 [ 550.571834][ T5843] Bluetooth: hci1: command tx timeout [ 550.598546][T17089] lo speed is unknown, defaulting to 1000 [ 550.993478][T17079] chnl_net:caif_netlink_parms(): no params data found [ 551.455617][T17079] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.473530][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.483734][T17079] bridge_slave_0: entered allmulticast mode [ 551.495240][T17079] bridge_slave_0: entered promiscuous mode [ 551.508131][ T68] hsr_slave_0: left promiscuous mode [ 551.514628][ T68] hsr_slave_1: left promiscuous mode [ 551.674291][ T68] hsr0 (unregistering): left allmulticast mode [ 552.356856][T17079] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.365178][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.372528][T17079] bridge_slave_1: entered allmulticast mode [ 552.379480][T17079] bridge_slave_1: entered promiscuous mode [ 552.453251][T17079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.476543][T17079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.557487][T17079] team0: Port device team_slave_0 added [ 552.617832][T17079] team0: Port device team_slave_1 added [ 552.651891][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 552.687870][T17079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.735072][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.828846][T17079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.881862][T17079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.904849][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.987645][T17079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.104326][T17079] hsr_slave_0: entered promiscuous mode [ 553.110965][T17079] hsr_slave_1: entered promiscuous mode [ 553.117494][T17079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.126343][T17079] Cannot create hsr debugfs directory [ 553.178448][ T68] IPVS: stop unused estimator thread 0... [ 553.530704][T17079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.542324][T17079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 553.551982][T17079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 553.561166][T17079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.626545][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.647935][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.663056][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.670260][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.687243][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.694503][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.935390][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.008582][T17144] lo speed is unknown, defaulting to 1000 [ 554.049723][T17079] veth0_vlan: entered promiscuous mode [ 554.096627][T17079] veth1_vlan: entered promiscuous mode [ 554.177323][T17149] ip6gre2: entered allmulticast mode [ 554.214147][T17079] veth0_macvtap: entered promiscuous mode [ 554.234087][T17079] veth1_macvtap: entered promiscuous mode [ 554.291102][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.316171][T17079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.354607][T17079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.382041][T17079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.410635][T17079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.434056][T17079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.450531][T17157] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 554.471659][T17157] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 554.478696][T17157] 0ªX¹¦Dö»: entered allmulticast mode [ 554.497384][T17157] 0ªX¹¦Dö»: entered promiscuous mode [ 554.515769][T17144] lo speed is unknown, defaulting to 1000 [ 554.535069][T17157] 0ªX¹¦Dö»: left allmulticast mode [ 554.543677][T17157] 0ªX¹¦Dö»: left promiscuous mode [ 554.553788][T17157] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 554.572812][T17144] lo speed is unknown, defaulting to 1000 [ 554.628696][T17144] lo speed is unknown, defaulting to 1000 [ 554.663621][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.685997][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.727114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.738175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.742663][ T5147] Bluetooth: hci1: command 0x041b tx timeout [ 554.747216][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3273'. [ 555.526120][T17187] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 555.672727][T17187] lo speed is unknown, defaulting to 1000 [ 556.060988][T17187] lo speed is unknown, defaulting to 1000 [ 556.068749][T17187] lo speed is unknown, defaulting to 1000 [ 556.079714][T17187] lo speed is unknown, defaulting to 1000 [ 557.109158][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.376258][T17238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.388388][T17239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.407988][T17239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.419948][T17239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.429856][T17239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 557.438722][T17239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.456590][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 557.481039][T17236] lo speed is unknown, defaulting to 1000 [ 557.658955][T17236] lo speed is unknown, defaulting to 1000 [ 557.666483][T17236] lo speed is unknown, defaulting to 1000 [ 557.675369][T17236] lo speed is unknown, defaulting to 1000 [ 558.029755][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.036152][T17260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3303'. [ 558.068149][T17236] chnl_net:caif_netlink_parms(): no params data found [ 558.148775][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.261369][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.519000][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.539194][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.565759][T17236] bridge_slave_0: entered allmulticast mode [ 558.587553][T17236] bridge_slave_0: entered promiscuous mode [ 558.600603][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.608492][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.616344][T17236] bridge_slave_1: entered allmulticast mode [ 558.628802][T17236] bridge_slave_1: entered promiscuous mode [ 558.638341][T17267] lo speed is unknown, defaulting to 1000 [ 558.640471][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3307'. [ 558.810097][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.849091][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.967032][ T12] bridge_slave_1: left allmulticast mode [ 558.973578][ T12] bridge_slave_1: left promiscuous mode [ 558.995836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.038914][ T12] bridge_slave_0: left allmulticast mode [ 559.044703][ T12] bridge_slave_0: left promiscuous mode [ 559.071043][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.531998][ T5147] Bluetooth: hci1: command tx timeout [ 559.816193][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.827347][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.844201][ T12] bond0 (unregistering): Released all slaves [ 559.865256][T17278] batadv_slave_1: entered promiscuous mode [ 559.872157][T17281] batadv_slave_1: left promiscuous mode [ 559.878062][T17267] lo speed is unknown, defaulting to 1000 [ 559.920650][T17236] team0: Port device team_slave_0 added [ 559.932771][T17267] lo speed is unknown, defaulting to 1000 [ 559.943453][T17267] lo speed is unknown, defaulting to 1000 [ 559.963990][T17236] team0: Port device team_slave_1 added [ 560.107616][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.116189][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.146167][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.175673][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.183757][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.211514][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.327775][T17236] hsr_slave_0: entered promiscuous mode [ 560.359837][T17236] hsr_slave_1: entered promiscuous mode [ 560.368099][T17236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.376185][T17236] Cannot create hsr debugfs directory [ 561.030460][ T12] hsr_slave_0: left promiscuous mode [ 561.036829][ T12] hsr_slave_1: left promiscuous mode [ 561.046761][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.073390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.083523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.090979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.128466][ T12] veth1_macvtap: left promiscuous mode [ 561.135681][ T12] veth0_macvtap: left promiscuous mode [ 561.141403][ T12] veth1_vlan: left promiscuous mode [ 561.147105][ T12] veth0_vlan: left promiscuous mode [ 561.613797][ T5147] Bluetooth: hci1: command tx timeout [ 561.622152][ T12] team0 (unregistering): Port device team_slave_1 removed [ 561.668400][ T12] team0 (unregistering): Port device team_slave_0 removed [ 562.648655][T17236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.661058][T17236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.673897][T17236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.686236][T17236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.812507][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.836054][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.849615][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.856807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.872658][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.879820][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.078433][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.158076][T17236] veth0_vlan: entered promiscuous mode [ 563.181753][T17236] veth1_vlan: entered promiscuous mode [ 563.234776][T17236] veth0_macvtap: entered promiscuous mode [ 563.269654][T17236] veth1_macvtap: entered promiscuous mode [ 563.314016][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.339285][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.354697][T17236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.375918][T17236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.401725][T17236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.424603][T17236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.562354][T17352] lo speed is unknown, defaulting to 1000 [ 563.568424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.586397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.653507][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.678846][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.691680][ T5147] Bluetooth: hci1: command tx timeout [ 563.933165][T17352] lo speed is unknown, defaulting to 1000 [ 563.940186][T17352] lo speed is unknown, defaulting to 1000 [ 563.972485][T17352] lo speed is unknown, defaulting to 1000 [ 564.828595][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 565.668190][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.799792][T17411] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 565.821151][T17411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3351'. [ 565.937845][T17418] lo: left promiscuous mode [ 565.968837][ T5169] lo speed is unknown, defaulting to 1000 [ 566.003848][ T5169] lo speed is unknown, defaulting to 1000 [ 566.029378][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 566.041139][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 566.051310][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 566.064804][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 566.075096][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 566.103001][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 566.169146][T17429] netlink: 'syz.3.3358': attribute type 8 has an invalid length. [ 566.213399][T17424] lo speed is unknown, defaulting to 1000 [ 566.339281][T17436] syzkaller1: entered promiscuous mode [ 566.345223][T17436] syzkaller1: entered allmulticast mode [ 566.437840][T17424] lo speed is unknown, defaulting to 1000 [ 566.529353][T17424] lo speed is unknown, defaulting to 1000 [ 566.546920][T17424] lo speed is unknown, defaulting to 1000 [ 566.639385][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.818924][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.952186][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.416530][ T35] bridge_slave_1: left allmulticast mode [ 567.423018][ T35] bridge_slave_1: left promiscuous mode [ 567.428851][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.440328][ T35] bridge_slave_0: left allmulticast mode [ 567.446452][ T35] bridge_slave_0: left promiscuous mode [ 567.454186][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.909664][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.920764][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.933770][ T35] bond0 (unregistering): Released all slaves [ 567.966278][T17484] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 568.169809][T17424] chnl_net:caif_netlink_parms(): no params data found [ 568.172388][ T5843] Bluetooth: hci1: command tx timeout [ 568.342948][T17500] netlink: 'syz.3.3380': attribute type 4 has an invalid length. [ 568.394914][T17497] netlink: 'syz.3.3380': attribute type 4 has an invalid length. [ 568.538436][ T8] lo speed is unknown, defaulting to 1000 [ 568.640862][ T8] lo speed is unknown, defaulting to 1000 [ 568.648051][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.728165][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.729289][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 568.741773][T17424] bridge_slave_0: entered allmulticast mode [ 568.762980][T17424] bridge_slave_0: entered promiscuous mode [ 568.818996][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.858060][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.913767][T17424] bridge_slave_1: entered allmulticast mode [ 568.938974][T17424] bridge_slave_1: entered promiscuous mode [ 569.140641][ T35] hsr_slave_0: left promiscuous mode [ 569.152577][ T35] hsr_slave_1: left promiscuous mode [ 569.158738][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.175807][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.192621][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.220550][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.344304][ T35] veth1_macvtap: left promiscuous mode [ 569.350047][ T35] veth0_macvtap: left promiscuous mode [ 569.355835][ T35] veth1_vlan: left promiscuous mode [ 569.361314][ T35] veth0_vlan: left promiscuous mode [ 569.953937][ T35] team0 (unregistering): Port device team_slave_1 removed [ 570.011665][ T35] team0 (unregistering): Port device team_slave_0 removed [ 570.256264][ T5843] Bluetooth: hci1: command tx timeout [ 570.680502][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.704163][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.863516][T17424] team0: Port device team_slave_0 added [ 570.927331][T17424] team0: Port device team_slave_1 added [ 571.024585][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.047315][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.100120][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.115639][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.139871][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.191586][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.281922][T17424] hsr_slave_0: entered promiscuous mode [ 571.289304][T17424] hsr_slave_1: entered promiscuous mode [ 571.302679][T17424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.310408][T17424] Cannot create hsr debugfs directory [ 571.630996][T17584] netlink: 'syz.3.3405': attribute type 10 has an invalid length. [ 571.646279][T17584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3405'. [ 571.790937][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 571.970222][T17424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.027123][T17424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.124740][T17424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.203643][T17607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3411'. [ 572.223921][T17424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.331805][ T5843] Bluetooth: hci1: command tx timeout [ 572.349820][T17610] ip6tnl2: entered promiscuous mode [ 572.432841][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3413'. [ 572.463864][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.523122][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.539873][T17616] lo speed is unknown, defaulting to 1000 [ 572.547363][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.554511][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.579175][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.586373][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.138164][T17616] lo speed is unknown, defaulting to 1000 [ 573.221997][T17616] lo speed is unknown, defaulting to 1000 [ 573.230601][T17616] lo speed is unknown, defaulting to 1000 [ 573.374334][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 573.418777][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 573.654326][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 573.761268][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.844062][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 573.885050][T17424] veth0_vlan: entered promiscuous mode [ 573.925514][T17424] veth1_vlan: entered promiscuous mode [ 574.044541][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 574.045122][T17424] veth0_macvtap: entered promiscuous mode [ 574.090815][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3430'. [ 574.220647][T17424] veth1_macvtap: entered promiscuous mode [ 574.366676][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.411587][ T5843] Bluetooth: hci1: command tx timeout [ 574.433852][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.455972][T17424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.465070][T17424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.474023][T17424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.483400][T17424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.653174][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.681663][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.834294][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.863386][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.386713][T17712] bridge0: port 1(gretap0) entered blocking state [ 575.399739][T17712] bridge0: port 1(gretap0) entered disabled state [ 575.407465][T17712] gretap0: entered allmulticast mode [ 575.414961][T17712] bridge0: port 1(gretap0) entered blocking state [ 575.421553][T17712] bridge0: port 1(gretap0) entered forwarding state [ 575.450098][T17712] gretap0: left allmulticast mode [ 575.456251][T17712] bridge0: port 1(gretap0) entered disabled state [ 575.780907][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.230763][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.442198][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.705579][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.829388][T17752] __nla_validate_parse: 4 callbacks suppressed [ 576.829408][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3450'. [ 577.032716][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.044786][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.055445][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.064642][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.092243][T17760] netlink: 'syz.2.3453': attribute type 4 has an invalid length. [ 577.100049][T17760] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3453'. [ 577.111688][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 577.119253][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.252989][T17761] lo speed is unknown, defaulting to 1000 [ 577.263335][ T11] bridge_slave_1: left allmulticast mode [ 577.272718][ T11] bridge_slave_1: left promiscuous mode [ 577.278539][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.314711][ T11] bridge_slave_0: left allmulticast mode [ 577.341541][ T11] bridge_slave_0: left promiscuous mode [ 577.354328][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.368259][T17774] ipt_rpfilter: unknown options [ 577.976628][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.988363][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.999557][ T11] bond0 (unregistering): Released all slaves [ 578.014751][T17761] lo speed is unknown, defaulting to 1000 [ 578.027274][T17770] lo speed is unknown, defaulting to 1000 [ 578.050156][T17761] lo speed is unknown, defaulting to 1000 [ 578.092480][T17761] lo speed is unknown, defaulting to 1000 [ 578.278550][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3465'. [ 578.449589][T17770] lo speed is unknown, defaulting to 1000 [ 578.463745][T17770] lo speed is unknown, defaulting to 1000 [ 578.542850][T17770] lo speed is unknown, defaulting to 1000 [ 578.786207][T17808] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 578.918629][T17808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.049620][T17814] bond4: (slave veth7): Enslaving as an active interface with a down link [ 579.183589][ T5919] page_pool_release_retry() stalled pool shutdown: id 134, 1 inflight 60 sec [ 579.222036][ T5843] Bluetooth: hci1: command tx timeout [ 579.712157][T17828] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 579.720955][T17828] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 579.741645][ T11] hsr_slave_0: left promiscuous mode [ 579.756244][ T11] hsr_slave_1: left promiscuous mode [ 579.767321][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.782064][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.790495][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.812446][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.856270][ T11] veth1_macvtap: left promiscuous mode [ 579.862039][ T11] veth0_macvtap: left promiscuous mode [ 579.867659][ T11] veth1_vlan: left promiscuous mode [ 579.876557][ T11] veth0_vlan: left promiscuous mode [ 580.467837][ T11] team0 (unregistering): Port device team_slave_1 removed [ 580.517241][ T11] team0 (unregistering): Port device team_slave_0 removed [ 581.136295][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 581.205758][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 581.226306][T17761] chnl_net:caif_netlink_parms(): no params data found [ 581.292518][ T5843] Bluetooth: hci1: command tx timeout [ 581.435137][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.442781][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.451100][T17761] bridge_slave_0: entered allmulticast mode [ 581.458723][T17761] bridge_slave_0: entered promiscuous mode [ 581.472388][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.488479][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.498736][T17761] bridge_slave_1: entered allmulticast mode [ 581.506519][T17761] bridge_slave_1: entered promiscuous mode [ 581.560645][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.586470][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.669253][T17761] team0: Port device team_slave_0 added [ 581.698005][T17761] team0: Port device team_slave_1 added [ 581.748978][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3483'. [ 581.755939][T17878] netlink: 'syz.2.3484': attribute type 4 has an invalid length. [ 581.780784][T17878] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3484'. [ 581.794139][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.801737][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.830111][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.865850][T17878] lo speed is unknown, defaulting to 1000 [ 581.875810][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.900645][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.941841][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.175506][T17761] hsr_slave_0: entered promiscuous mode [ 582.194619][T17761] hsr_slave_1: entered promiscuous mode [ 582.209678][T17761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.228050][T17761] Cannot create hsr debugfs directory [ 582.245486][T17878] lo speed is unknown, defaulting to 1000 [ 582.296129][T17878] lo speed is unknown, defaulting to 1000 [ 582.358270][T17878] lo speed is unknown, defaulting to 1000 [ 582.836798][T17879] ipt_rpfilter: unknown options [ 583.087062][T17761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.135102][T17761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 583.157409][T17761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 583.221862][T17761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.381723][ T5843] Bluetooth: hci1: command tx timeout [ 583.476872][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.517223][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.550880][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.558110][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.581010][T17913] netlink: 'syz.4.3494': attribute type 4 has an invalid length. [ 583.592047][T17913] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3494'. [ 583.605879][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.613116][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.714944][T17913] lo speed is unknown, defaulting to 1000 [ 583.785986][T17914] ipt_rpfilter: unknown options [ 583.834628][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'. [ 583.860411][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 583.877309][T17913] lo speed is unknown, defaulting to 1000 [ 583.884432][T17913] lo speed is unknown, defaulting to 1000 [ 583.893202][T17913] lo speed is unknown, defaulting to 1000 [ 583.925333][T17922] nbd: nbd0 already in use [ 584.270542][T17934] openvswitch: netlink: Tunnel attr 308 out of range max 16 [ 584.297010][T17931] tipc: Resetting bearer [ 584.325615][T17761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.360087][T17937] tipc: Enabled bearer , priority 0 [ 584.547682][T17937] syzkaller0: entered promiscuous mode [ 584.585483][T17937] syzkaller0: entered allmulticast mode [ 584.622186][T17937] tipc: Resetting bearer [ 584.668075][T17761] veth0_vlan: entered promiscuous mode [ 584.711921][T17936] tipc: Resetting bearer [ 585.453938][ T5843] Bluetooth: hci1: command tx timeout [ 586.956797][T17936] tipc: Disabling bearer [ 586.969188][T17761] veth1_vlan: entered promiscuous mode [ 587.005360][T17965] lo speed is unknown, defaulting to 1000 [ 587.062020][T17761] veth0_macvtap: entered promiscuous mode [ 587.085009][T17761] veth1_macvtap: entered promiscuous mode [ 587.130946][T17761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.194970][T17761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.202264][T17974] netlink: 'syz.4.3512': attribute type 4 has an invalid length. [ 587.202288][T17974] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3512'. [ 587.260274][T17761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.286372][T17761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.307982][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'. [ 587.311200][T17761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.350981][T17761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.384842][T17965] lo speed is unknown, defaulting to 1000 [ 587.385511][T17984] ipt_rpfilter: unknown options [ 587.419036][T17965] lo speed is unknown, defaulting to 1000 [ 587.430635][T17974] lo speed is unknown, defaulting to 1000 [ 587.432761][T17965] lo speed is unknown, defaulting to 1000 [ 587.550594][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.585702][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.637695][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.647156][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.743574][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'. [ 587.794708][T17974] lo speed is unknown, defaulting to 1000 [ 587.814840][T17974] lo speed is unknown, defaulting to 1000 [ 587.877444][T17974] lo speed is unknown, defaulting to 1000 [ 588.657039][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.969260][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.099939][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.248399][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.377229][ T1143] bridge_slave_1: left allmulticast mode [ 589.383215][ T1143] bridge_slave_1: left promiscuous mode [ 589.388892][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.399796][ T1143] bridge_slave_0: left allmulticast mode [ 589.405731][ T1143] bridge_slave_0: left promiscuous mode [ 589.411472][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.823559][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.833641][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.861755][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.886856][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.905265][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 589.921025][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.996771][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.008287][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.019184][ T1143] bond0 (unregistering): Released all slaves [ 590.097172][T18011] lo speed is unknown, defaulting to 1000 [ 590.334895][T18011] lo speed is unknown, defaulting to 1000 [ 590.344259][T18011] lo speed is unknown, defaulting to 1000 [ 590.354242][T18011] lo speed is unknown, defaulting to 1000 [ 590.464847][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 590.873868][T18029] lo speed is unknown, defaulting to 1000 [ 591.246681][ T1143] hsr_slave_0: left promiscuous mode [ 591.269898][ T1143] hsr_slave_1: left promiscuous mode [ 591.288675][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.343495][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.465794][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.474789][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.520023][ T1143] veth1_macvtap: left promiscuous mode [ 591.532205][ T1143] veth0_macvtap: left promiscuous mode [ 591.540057][ T1143] veth1_vlan: left promiscuous mode [ 591.545669][ T1143] veth0_vlan: left promiscuous mode [ 592.022530][ T5147] Bluetooth: hci1: command tx timeout [ 592.654953][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 592.712381][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 593.158823][T18030] netlink: 'syz.2.3526': attribute type 21 has an invalid length. [ 593.167486][T18030] netlink: 'syz.2.3526': attribute type 6 has an invalid length. [ 593.175925][T18030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3526'. [ 593.185948][T18029] lo speed is unknown, defaulting to 1000 [ 593.190595][T18053] lo speed is unknown, defaulting to 1000 [ 593.219884][T18029] lo speed is unknown, defaulting to 1000 [ 593.245814][T18029] lo speed is unknown, defaulting to 1000 [ 593.338886][T18011] chnl_net:caif_netlink_parms(): no params data found [ 593.545860][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.568252][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.601181][T18011] bridge_slave_0: entered allmulticast mode [ 593.608943][T18011] bridge_slave_0: entered promiscuous mode [ 593.646995][T18053] lo speed is unknown, defaulting to 1000 [ 593.653092][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.653156][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.653291][T18011] bridge_slave_1: entered allmulticast mode [ 593.654397][T18011] bridge_slave_1: entered promiscuous mode [ 593.732990][T18053] lo speed is unknown, defaulting to 1000 [ 593.738666][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 593.840362][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.906976][T18053] lo speed is unknown, defaulting to 1000 [ 593.909931][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.955677][T18079] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.982254][ T975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.039673][T18011] team0: Port device team_slave_0 added [ 594.066888][T18011] team0: Port device team_slave_1 added [ 594.092361][ T5147] Bluetooth: hci1: command 0x041b tx timeout [ 594.114560][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.127405][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.159120][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.177649][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.193026][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.260828][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.456490][ T975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.570495][T18011] hsr_slave_0: entered promiscuous mode [ 594.577248][T18011] hsr_slave_1: entered promiscuous mode [ 594.591792][T18011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.599564][T18011] Cannot create hsr debugfs directory [ 594.924404][T18086] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 594.971690][T18086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3538'. [ 595.140111][T18091] netlink: 'syz.2.3540': attribute type 4 has an invalid length. [ 595.197783][T18095] netlink: 'syz.2.3540': attribute type 4 has an invalid length. [ 595.415752][T18102] netlink: 'syz.4.3543': attribute type 39 has an invalid length. [ 595.584837][T18011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.598255][T18011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.625030][T18011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.642934][T18011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 595.950534][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.984261][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.006652][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.013877][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.049298][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.056534][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.172149][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 596.212285][T18120] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 596.242988][T18120] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3550'. [ 596.390227][T18126] netlink: 'syz.0.3551': attribute type 2 has an invalid length. [ 596.409054][T18126] netlink: 'syz.0.3551': attribute type 9 has an invalid length. [ 596.440458][T18126] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3551'. [ 596.454365][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.496418][T18129] lo speed is unknown, defaulting to 1000 [ 596.584506][T18011] veth0_vlan: entered promiscuous mode [ 596.650969][T18011] veth1_vlan: entered promiscuous mode [ 596.694385][T18011] veth0_macvtap: entered promiscuous mode [ 596.726660][T18011] veth1_macvtap: entered promiscuous mode [ 596.768058][T18011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.816085][T18011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.825375][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 596.864759][T18011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.884384][T18011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.893925][T18011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.903396][T18011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.072833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.101114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.131381][T18129] lo speed is unknown, defaulting to 1000 [ 597.136872][T18131] lo speed is unknown, defaulting to 1000 [ 597.194024][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.222732][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.232464][T18129] lo speed is unknown, defaulting to 1000 [ 597.288105][T18129] lo speed is unknown, defaulting to 1000 [ 597.443739][T18131] lo speed is unknown, defaulting to 1000 [ 597.450532][T18131] lo speed is unknown, defaulting to 1000 [ 597.478839][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 597.487707][T18146] lo speed is unknown, defaulting to 1000 [ 597.533317][T18153] bond3: entered promiscuous mode [ 597.538740][T18153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.659293][T18131] lo speed is unknown, defaulting to 1000 [ 597.903888][T18159] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 597.929381][T18158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.937928][T18158] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 597.948819][T18158] bond3: (slave vti0): Error -95 calling set_mac_address [ 597.961652][T18146] lo speed is unknown, defaulting to 1000 [ 597.978656][T18146] lo speed is unknown, defaulting to 1000 [ 597.996842][T18146] lo speed is unknown, defaulting to 1000 [ 598.635820][T13988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.823618][T13988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.853503][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.867064][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.880383][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.899056][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.907327][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 599.916768][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.988332][T13988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.099770][T13988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.144737][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 600.157000][T18177] lo speed is unknown, defaulting to 1000 [ 600.376594][T13988] bridge_slave_1: left allmulticast mode [ 600.394224][T13988] bridge_slave_1: left promiscuous mode [ 600.400110][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.440599][T13988] bridge_slave_0: left allmulticast mode [ 600.446882][T13988] bridge_slave_0: left promiscuous mode [ 600.475650][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.343194][T13988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.355394][T13988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.366781][T13988] bond0 (unregistering): Released all slaves [ 601.379290][T18177] lo speed is unknown, defaulting to 1000 [ 601.388211][T18201] lo speed is unknown, defaulting to 1000 [ 601.391852][T18177] lo speed is unknown, defaulting to 1000 [ 601.421374][T18177] lo speed is unknown, defaulting to 1000 [ 601.590167][T18218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3574'. [ 601.845005][T18219] netlink: 'syz.3.3574': attribute type 6 has an invalid length. [ 601.860772][T18201] lo speed is unknown, defaulting to 1000 [ 601.892721][T18201] lo speed is unknown, defaulting to 1000 [ 602.017563][ T5843] Bluetooth: hci1: command tx timeout [ 602.045637][T18201] lo speed is unknown, defaulting to 1000 [ 602.328100][T18177] chnl_net:caif_netlink_parms(): no params data found [ 602.900612][T18177] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.911965][T18251] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 602.930311][T18251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3581'. [ 602.930990][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.027407][T18177] bridge_slave_0: entered allmulticast mode [ 603.063395][T18177] bridge_slave_0: entered promiscuous mode [ 603.306318][T13988] hsr_slave_0: left promiscuous mode [ 603.321970][T13988] hsr_slave_1: left promiscuous mode [ 603.328156][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.348744][T13988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.364004][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.376580][T13988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.425393][T13988] veth1_macvtap: left promiscuous mode [ 603.431206][T13988] veth0_macvtap: left promiscuous mode [ 603.439531][T13988] veth1_vlan: left promiscuous mode [ 603.447540][T13988] veth0_vlan: left promiscuous mode [ 604.094026][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.102665][ T5843] Bluetooth: hci1: command tx timeout [ 604.157299][T13988] team0 (unregistering): Port device team_slave_1 removed [ 604.218695][T13988] team0 (unregistering): Port device team_slave_0 removed [ 604.708390][T18177] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.722459][T18263] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 604.730249][T18263] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3582'. [ 604.740537][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.763900][T18177] bridge_slave_1: entered allmulticast mode [ 604.770955][T18177] bridge_slave_1: entered promiscuous mode [ 604.942984][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.018252][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.267753][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 605.278968][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 605.299081][T18284] netlink: 'syz.0.3587': attribute type 1 has an invalid length. [ 605.332133][T18284] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3587'. [ 605.367726][T18177] team0: Port device team_slave_0 added [ 605.385920][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3588'. [ 605.420190][T18177] team0: Port device team_slave_1 added [ 605.426895][T18284] nbd: socks must be embedded in a SOCK_ITEM attr [ 605.440607][T18284] block nbd1: shutting down sockets [ 605.483663][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.490684][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.517690][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3588'. [ 605.525513][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.543372][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.560562][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.596209][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.696247][T18289] lo speed is unknown, defaulting to 1000 [ 605.740089][T18177] hsr_slave_0: entered promiscuous mode [ 605.770629][T18177] hsr_slave_1: entered promiscuous mode [ 605.794969][T18177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.830956][T18177] Cannot create hsr debugfs directory [ 606.074719][T18297] netlink: 'syz.3.3592': attribute type 4 has an invalid length. [ 606.107752][T18297] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3592'. [ 606.172090][ T5843] Bluetooth: hci1: command tx timeout [ 606.241597][T18289] lo speed is unknown, defaulting to 1000 [ 606.248713][T18289] lo speed is unknown, defaulting to 1000 [ 606.252180][T18299] lo speed is unknown, defaulting to 1000 [ 606.257442][T18289] lo speed is unknown, defaulting to 1000 [ 606.307187][T18302] ipt_rpfilter: unknown options [ 606.532298][T18177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.554123][T18177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.572762][T18177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.605557][T18177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 606.886498][T18305] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 606.916082][T18305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3594'. [ 606.947310][T18177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.967587][T18177] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.160989][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.168280][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.202734][T18300] lo speed is unknown, defaulting to 1000 [ 607.209638][T18299] lo speed is unknown, defaulting to 1000 [ 607.233321][T18299] lo speed is unknown, defaulting to 1000 [ 607.238474][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.246270][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.301079][T18299] lo speed is unknown, defaulting to 1000 [ 607.619259][T18300] lo speed is unknown, defaulting to 1000 [ 607.632733][T18300] lo speed is unknown, defaulting to 1000 [ 607.640530][T18300] lo speed is unknown, defaulting to 1000 [ 607.888571][T18177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.092176][T18177] veth0_vlan: entered promiscuous mode [ 608.205873][T18177] veth1_vlan: entered promiscuous mode [ 608.263202][ T5843] Bluetooth: hci1: command tx timeout [ 608.327388][T18177] veth0_macvtap: entered promiscuous mode [ 608.345392][T18177] veth1_macvtap: entered promiscuous mode [ 608.384906][T18177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.414286][T18177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.455042][T18177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.485092][T18177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.506202][T18177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.527074][T18177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.792040][T13988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.799967][T13988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.866204][T13988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.898016][T13988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.059007][T18332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3598'. [ 609.087047][T18332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3598'. [ 609.875514][T18347] bond4: (slave veth7): Releasing active interface [ 609.882924][ T5169] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.071726][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.089501][T13988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.253823][T18345] lo speed is unknown, defaulting to 1000 [ 610.292615][T13988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.346910][T18348] syzkaller1: entered promiscuous mode [ 610.352848][T18348] syzkaller1: entered allmulticast mode [ 610.460615][T18345] lo speed is unknown, defaulting to 1000 [ 610.471346][T18345] lo speed is unknown, defaulting to 1000 [ 610.481071][T18345] lo speed is unknown, defaulting to 1000 [ 610.747016][T13988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.920780][T13988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.084398][T13988] bridge_slave_1: left allmulticast mode [ 611.101629][T18356] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 611.103627][T18355] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 611.123364][T13988] bridge_slave_1: left promiscuous mode [ 611.129161][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.137062][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 611.143297][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 611.150063][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3607'. [ 611.166328][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3607'. [ 611.179087][T13988] bridge_slave_0: left allmulticast mode [ 611.185284][T13988] bridge_slave_0: left promiscuous mode [ 611.191872][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.388949][T18363] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 611.485979][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.513985][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.532344][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.545978][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.560078][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 611.573039][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.805377][T13988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.818861][T13988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.831220][T13988] bond0 (unregistering): Released all slaves [ 611.897664][T18359] lo speed is unknown, defaulting to 1000 [ 612.198305][T18359] lo speed is unknown, defaulting to 1000 [ 612.203547][T18364] lo speed is unknown, defaulting to 1000 [ 612.207301][T18359] lo speed is unknown, defaulting to 1000 [ 612.218044][T18359] lo speed is unknown, defaulting to 1000 [ 612.328016][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 612.486550][T18364] lo speed is unknown, defaulting to 1000 [ 612.515875][T18364] lo speed is unknown, defaulting to 1000 [ 612.532796][T18382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3611'. [ 612.544572][T18382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3611'. [ 612.585576][T18364] lo speed is unknown, defaulting to 1000 [ 613.069892][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3616'. [ 613.198986][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3616'. [ 613.350577][T13988] hsr_slave_0: left promiscuous mode [ 613.360221][T13988] hsr_slave_1: left promiscuous mode [ 613.371785][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 613.374833][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.387361][T13988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.403346][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.419855][T13988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.684454][T13988] veth1_macvtap: left promiscuous mode [ 613.690180][T13988] veth0_macvtap: left promiscuous mode [ 613.700611][T13988] veth1_vlan: left promiscuous mode [ 613.707999][T13988] veth0_vlan: left promiscuous mode [ 613.713662][ T5843] Bluetooth: hci1: command tx timeout [ 613.938296][T18404] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3619'. [ 613.963856][T18404] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 614.526479][T13988] team0 (unregistering): Port device team_slave_1 removed [ 614.546065][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3623'. [ 614.585928][T13988] team0 (unregistering): Port device team_slave_0 removed [ 615.047536][T18406] smc: net device bond0 applied user defined pnetid SYZ0 [ 615.057936][T18407] smc: net device bond0 erased user defined pnetid SYZ0 [ 615.168584][T18364] chnl_net:caif_netlink_parms(): no params data found [ 615.452084][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.481036][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.494091][T18364] bridge_slave_0: entered allmulticast mode [ 615.501886][T18364] bridge_slave_0: entered promiscuous mode [ 615.523051][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.530288][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.538176][T18364] bridge_slave_1: entered allmulticast mode [ 615.545505][T18364] bridge_slave_1: entered promiscuous mode [ 615.613520][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.635042][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.667496][T18439] lo speed is unknown, defaulting to 1000 [ 615.771556][ T5847] Bluetooth: hci1: command tx timeout [ 615.950388][T18364] team0: Port device team_slave_0 added [ 615.973550][T18364] team0: Port device team_slave_1 added [ 616.049651][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.067252][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.134993][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.177869][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.191589][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.245893][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.259843][T18447] lo speed is unknown, defaulting to 1000 [ 616.272471][T18439] lo speed is unknown, defaulting to 1000 [ 616.279317][T18439] lo speed is unknown, defaulting to 1000 [ 616.360406][T18439] lo speed is unknown, defaulting to 1000 [ 616.374193][T18364] hsr_slave_0: entered promiscuous mode [ 616.408627][T18364] hsr_slave_1: entered promiscuous mode [ 616.424735][T18364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.445229][T18364] Cannot create hsr debugfs directory [ 616.559756][T18452] netlink: 'syz.0.3632': attribute type 1 has an invalid length. [ 616.580312][T18454] netlink: 'syz.3.3633': attribute type 11 has an invalid length. [ 616.588044][T18452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3632'. [ 616.598690][T18454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3633'. [ 616.711086][T18447] lo speed is unknown, defaulting to 1000 [ 616.711132][T18454] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 616.896711][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 616.906350][T18447] lo speed is unknown, defaulting to 1000 [ 617.087313][T18447] lo speed is unknown, defaulting to 1000 [ 617.757480][T18364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 617.830787][T18364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.852252][ T5847] Bluetooth: hci1: command tx timeout [ 617.854039][T18364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 617.876279][T18364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 617.994296][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 618.078592][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.171239][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.220728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.227970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.292143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.300721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.527144][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'. [ 618.569843][T18481] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 618.622324][T18481] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 618.800631][T18490] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 618.861832][T18490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3639'. [ 618.890787][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.898874][T18486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3639'. [ 618.908226][T18486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3639'. [ 618.992016][T18364] veth0_vlan: entered promiscuous mode [ 619.024821][T18364] veth1_vlan: entered promiscuous mode [ 619.040239][T18479] netlink: 'syz.2.3638': attribute type 21 has an invalid length. [ 619.049655][T18479] netlink: 'syz.2.3638': attribute type 6 has an invalid length. [ 619.070356][T18479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3638'. [ 619.130341][T18364] veth0_macvtap: entered promiscuous mode [ 619.155846][T18364] veth1_macvtap: entered promiscuous mode [ 619.216306][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.245943][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.263499][T18498] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3642'. [ 619.410962][T18364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.431141][T18364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.444253][T18364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.459731][T18364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.708533][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.724963][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.769172][T13988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.790304][T13988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.933223][ T5843] Bluetooth: hci1: command tx timeout [ 620.053403][T18523] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 620.067924][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 620.107609][T18523] lo speed is unknown, defaulting to 1000 [ 620.454593][T18523] lo speed is unknown, defaulting to 1000 [ 620.472895][T18523] lo speed is unknown, defaulting to 1000 [ 620.510362][T18523] lo speed is unknown, defaulting to 1000 [ 620.870748][T18530] Set syz1 is full, maxelem 65536 reached [ 621.888022][T18565] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 621.922660][T18565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3661'. [ 622.011909][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 622.077716][T18558] netlink: 'syz.0.3659': attribute type 21 has an invalid length. [ 622.100633][T18558] netlink: 'syz.0.3659': attribute type 6 has an invalid length. [ 622.169061][T18558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3659'. [ 622.602449][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.886621][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.017531][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.098916][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.194280][ T1143] bridge_slave_1: left allmulticast mode [ 623.200040][ T1143] bridge_slave_1: left promiscuous mode [ 623.206252][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.219447][ T1143] bridge_slave_0: left allmulticast mode [ 623.225687][ T1143] bridge_slave_0: left promiscuous mode [ 623.231576][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.563345][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.576192][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.586409][ T1143] bond0 (unregistering): Released all slaves [ 623.907630][T18587] dvmrp0: entered allmulticast mode [ 623.935221][T18589] sctp: [Deprecated]: syz.3.3666 (pid 18589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.935221][T18589] Use struct sctp_sack_info instead [ 623.952651][T18584] IPVS: length: 78 != 422621984 [ 623.952672][T18587] dvmrp0: left allmulticast mode [ 624.146600][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 624.191583][T18592] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.361939][ T1143] hsr_slave_0: left promiscuous mode [ 624.391653][ T1143] hsr_slave_1: left promiscuous mode [ 624.402222][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.441526][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.459452][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.475179][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.487902][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.497118][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.505377][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.517471][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 624.529715][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.555111][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.593670][ T1143] veth1_macvtap: left promiscuous mode [ 624.599253][ T1143] veth0_macvtap: left promiscuous mode [ 624.609551][ T1143] veth1_vlan: left promiscuous mode [ 624.614967][ T1143] veth0_vlan: left promiscuous mode [ 625.358277][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 625.454433][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 625.508874][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'. [ 626.025507][T18600] lo speed is unknown, defaulting to 1000 [ 626.132218][T18610] erspan1: left promiscuous mode [ 626.137230][T18610] erspan1: left allmulticast mode [ 626.182570][T18610] ip6tnl2: left promiscuous mode [ 626.230764][T18600] lo speed is unknown, defaulting to 1000 [ 626.244899][ T5919] lo speed is unknown, defaulting to 1000 [ 626.264296][T18600] lo speed is unknown, defaulting to 1000 [ 626.289184][T18600] lo speed is unknown, defaulting to 1000 [ 626.581810][ T5847] Bluetooth: hci1: command tx timeout [ 626.704760][T18641] Bluetooth: MGMT ver 1.23 [ 626.901805][T18600] chnl_net:caif_netlink_parms(): no params data found [ 627.123510][T18660] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 627.186575][T18600] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.205751][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 627.207682][T18600] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.232073][T18600] bridge_slave_0: entered allmulticast mode [ 627.239336][T18600] bridge_slave_0: entered promiscuous mode [ 627.249617][T18600] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.257199][T18600] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.264656][T18600] bridge_slave_1: entered allmulticast mode [ 627.272148][T18600] bridge_slave_1: entered promiscuous mode [ 627.285014][T18664] netlink: 'syz.4.3683': attribute type 10 has an invalid length. [ 627.326390][T18600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.341161][T18600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.456389][T18600] team0: Port device team_slave_0 added [ 627.465382][T18600] team0: Port device team_slave_1 added [ 627.531725][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 627.553052][T18600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.565738][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.597503][T18600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.602055][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 627.612350][T18600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.627645][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.654555][T18600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.670711][T18673] lo speed is unknown, defaulting to 1000 [ 627.701709][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 627.818119][T18600] hsr_slave_0: entered promiscuous mode [ 627.832885][T18600] hsr_slave_1: entered promiscuous mode [ 627.847441][T18600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.866764][T18600] Cannot create hsr debugfs directory [ 628.029120][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3687'. [ 628.082586][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'. [ 628.156795][T18673] lo speed is unknown, defaulting to 1000 [ 628.194324][T18673] lo speed is unknown, defaulting to 1000 [ 628.271202][T18673] lo speed is unknown, defaulting to 1000 [ 628.282298][T18697] netlink: 'syz.4.3690': attribute type 4 has an invalid length. [ 628.301693][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 628.344527][T18697] netlink: 'syz.4.3690': attribute type 4 has an invalid length. [ 628.359098][ T5919] lo speed is unknown, defaulting to 1000 [ 628.372039][ T5919] lo speed is unknown, defaulting to 1000 [ 628.390650][ T5919] lo speed is unknown, defaulting to 1000 [ 628.431855][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 628.652078][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 628.902694][T18600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 628.922822][T18600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 628.944527][T18600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 628.972347][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 629.013551][T18600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 629.091679][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 629.121691][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 629.238592][T18718] lo speed is unknown, defaulting to 1000 [ 629.323923][T18600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.390148][T18600] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.404425][T18724] netlink: 'syz.4.3699': attribute type 4 has an invalid length. [ 629.458823][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.466024][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.471843][T18724] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3699'. [ 629.543069][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.550255][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.631958][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 629.673456][T18726] ipt_rpfilter: unknown options [ 629.945786][T18718] lo speed is unknown, defaulting to 1000 [ 629.945811][T18727] lo speed is unknown, defaulting to 1000 [ 629.996091][T18718] lo speed is unknown, defaulting to 1000 [ 630.026859][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3700'. [ 630.070487][T18718] lo speed is unknown, defaulting to 1000 [ 630.086740][T18600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.245885][T18600] veth0_vlan: entered promiscuous mode [ 630.294557][T18600] veth1_vlan: entered promiscuous mode [ 630.345543][T18727] lo speed is unknown, defaulting to 1000 [ 630.367269][T18600] veth0_macvtap: entered promiscuous mode [ 630.376260][T18727] lo speed is unknown, defaulting to 1000 [ 630.385923][T18600] veth1_macvtap: entered promiscuous mode [ 630.419936][T18600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.457699][T18600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.473262][T18600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.486564][T18600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.496389][T18600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.526837][T18600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.565505][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 630.706467][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.736597][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 630.750537][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.778730][T18727] lo speed is unknown, defaulting to 1000 [ 630.794929][T13988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.844437][T13988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.017642][T18748] openvswitch: netlink: Flow key attr not present in new flow. [ 631.971578][T18762] sctp: [Deprecated]: syz.2.3704 (pid 18762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.971578][T18762] Use struct sctp_sack_info instead [ 631.974770][T18759] lo speed is unknown, defaulting to 1000 [ 632.070304][T18765] netlink: 'syz.2.3704': attribute type 10 has an invalid length. [ 632.121276][T18767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.266615][T18759] lo speed is unknown, defaulting to 1000 [ 632.267015][T18765] netlink: 'syz.2.3704': attribute type 11 has an invalid length. [ 632.282370][T18759] lo speed is unknown, defaulting to 1000 [ 632.316529][T18764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.351905][T18759] lo speed is unknown, defaulting to 1000 [ 632.427591][T13988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.468881][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3707'. [ 633.532879][T13988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.601134][T13988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.745015][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 633.756087][T13988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.804795][T18775] macsec2: entered promiscuous mode [ 633.810285][T18775] dummy0: entered promiscuous mode [ 633.818007][T18775] macsec2: entered allmulticast mode [ 633.825897][T18775] dummy0: entered allmulticast mode [ 633.838172][T18775] dummy0: left allmulticast mode [ 633.846447][T18775] dummy0: left promiscuous mode [ 633.924729][T18781] netlink: 'syz.2.3709': attribute type 39 has an invalid length. [ 634.124077][T13988] bridge_slave_1: left allmulticast mode [ 634.129907][T13988] bridge_slave_1: left promiscuous mode [ 634.155206][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.159802][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.186645][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.197178][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.209924][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.210268][T13988] bridge_slave_0: left allmulticast mode [ 634.228048][T13988] bridge_slave_0: left promiscuous mode [ 634.229298][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 634.233952][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.251219][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.327605][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 634.860953][T13988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.879454][T13988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.893792][T13988] bond0 (unregistering): Released all slaves [ 634.949253][T18795] lo speed is unknown, defaulting to 1000 [ 635.138845][T18819] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 635.158475][T18819] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3717'. [ 635.221815][T18816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.297268][T18816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.357819][T18795] lo speed is unknown, defaulting to 1000 [ 635.369042][T18819] lo speed is unknown, defaulting to 1000 [ 635.376544][T18795] lo speed is unknown, defaulting to 1000 [ 635.384523][T18795] lo speed is unknown, defaulting to 1000 [ 635.713480][T18819] lo speed is unknown, defaulting to 1000 [ 635.815647][T18821] ipt_rpfilter: unknown options [ 635.848189][T18819] lo speed is unknown, defaulting to 1000 [ 635.867886][T18819] lo speed is unknown, defaulting to 1000 [ 636.344972][ T5847] Bluetooth: hci1: command tx timeout [ 638.317535][T18795] chnl_net:caif_netlink_parms(): no params data found [ 638.349325][T13988] hsr_slave_0: left promiscuous mode [ 638.355572][T13988] hsr_slave_1: left promiscuous mode [ 638.363587][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.371058][T13988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.392559][T13988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.400018][T13988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.411542][ T5847] Bluetooth: hci1: command tx timeout [ 638.458215][T13988] veth1_macvtap: left promiscuous mode [ 638.464279][T13988] veth0_macvtap: left promiscuous mode [ 638.469927][T13988] veth1_vlan: left promiscuous mode [ 638.475657][T13988] veth0_vlan: left promiscuous mode [ 639.096567][T13988] team0 (unregistering): Port device team_slave_1 removed [ 639.173057][T13988] team0 (unregistering): Port device team_slave_0 removed [ 639.639500][T18850] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 639.650281][T18850] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 639.657411][T18850] 0ªX¹¦Dö»: entered allmulticast mode [ 639.672976][T18850] 0ªX¹¦Dö»: entered promiscuous mode [ 639.679932][T18852] 0ªX¹¦Dö»: left allmulticast mode [ 639.685735][T18852] 0ªX¹¦Dö»: left promiscuous mode [ 639.697002][T18852] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 639.728539][T18857] netlink: 'syz.0.3727': attribute type 7 has an invalid length. [ 639.736586][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'. [ 640.022340][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 640.144628][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 640.411520][T18795] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.446284][T18795] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.464079][T18795] bridge_slave_0: entered allmulticast mode [ 640.499709][ T5843] Bluetooth: hci1: command tx timeout [ 640.512885][T18795] bridge_slave_0: entered promiscuous mode [ 640.562612][T18795] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.576319][T18795] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.584290][T18795] bridge_slave_1: entered allmulticast mode [ 640.591570][T18795] bridge_slave_1: entered promiscuous mode [ 640.728684][T18880] lo speed is unknown, defaulting to 1000 [ 640.743185][T18795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.794461][T18795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.957580][T18795] team0: Port device team_slave_0 added [ 641.000308][T18795] team0: Port device team_slave_1 added [ 641.092933][T18880] lo speed is unknown, defaulting to 1000 [ 641.104523][T18795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.116835][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.146499][T18795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.167348][T18880] lo speed is unknown, defaulting to 1000 [ 641.176171][T18880] lo speed is unknown, defaulting to 1000 [ 641.193071][T18795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.208008][T18795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.275922][T18795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.552377][T18795] hsr_slave_0: entered promiscuous mode [ 641.592963][T18795] hsr_slave_1: entered promiscuous mode [ 641.623497][T18795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.644982][T18795] Cannot create hsr debugfs directory [ 642.382616][T18897] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.571519][ T5843] Bluetooth: hci1: command 0x0419 tx timeout [ 642.594964][T18903] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:19974 [ 642.618199][T18903] netlink: 'syz.0.3738': attribute type 10 has an invalid length. [ 642.639265][T18903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3738'. [ 642.681313][T18903] sctp: [Deprecated]: syz.0.3738 (pid 18903) Use of int in maxseg socket option. [ 642.681313][T18903] Use struct sctp_assoc_value instead [ 642.859998][T18905] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 642.875754][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 642.902060][T18905] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 642.910120][T18905] 0ªX¹¦Dö»: entered allmulticast mode [ 642.929227][T18905] 0ªX¹¦Dö»: entered promiscuous mode [ 642.948660][T18915] 0ªX¹¦Dö»: left allmulticast mode [ 642.959854][T18915] 0ªX¹¦Dö»: left promiscuous mode [ 642.965925][T18915] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 642.977653][T18795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 643.051000][T18795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 643.076848][T18795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 643.088423][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 643.138429][T18921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3741'. [ 643.192882][T18795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 643.273478][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 643.430845][T18795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.496657][T18795] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.882882][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.890122][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.935146][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.942369][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.088438][T18954] IPVS: length: 268369935 != 8 [ 644.113384][T18956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3748'. [ 644.182967][T18956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3748'. [ 644.197383][T18956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.303280][T18956] lo speed is unknown, defaulting to 1000 [ 644.564569][T18795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.651610][ T5847] Bluetooth: hci1: command 0x0419 tx timeout [ 644.688292][T18795] veth0_vlan: entered promiscuous mode [ 644.710163][T18795] veth1_vlan: entered promiscuous mode [ 644.750701][T18795] veth0_macvtap: entered promiscuous mode [ 644.764916][T18956] lo speed is unknown, defaulting to 1000 [ 644.773748][T18795] veth1_macvtap: entered promiscuous mode [ 644.795452][T18956] lo speed is unknown, defaulting to 1000 [ 644.822649][T18795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.840552][T18956] lo speed is unknown, defaulting to 1000 [ 644.848235][T18795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.877797][T18795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.888945][T18795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.898914][T18795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.909184][T18795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.922998][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3751'. [ 645.082148][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.090546][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.169313][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.177871][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.013241][ T975] page_pool_release_retry() stalled pool shutdown: id 173, 1 inflight 60 sec [ 646.169872][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3756'. [ 646.183928][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806fe4e000: rx timeout, send abort [ 646.196287][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806fe4e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 646.570379][ T3599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.071481][ T29] audit: type=1800 audit(1739916767.540:3): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3757" name="memory.events" dev="tmpfs" ino=4029 res=0 errno=0 [ 647.254006][ T3599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.555798][ T3599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.618699][ T3599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.695884][ T3599] bridge_slave_1: left allmulticast mode [ 647.703400][ T3599] bridge_slave_1: left promiscuous mode [ 647.710551][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.719334][ T3599] bridge_slave_0: left allmulticast mode [ 647.725229][ T3599] bridge_slave_0: left promiscuous mode [ 647.730945][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.221138][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.233620][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.247696][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.260327][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.289079][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 648.296772][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 648.636094][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.649533][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.671094][ T3599] bond0 (unregistering): Released all slaves [ 648.770819][T19052] lo speed is unknown, defaulting to 1000 [ 648.972946][T19062] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 648.988848][T19062] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3766'. [ 649.074952][T19052] lo speed is unknown, defaulting to 1000 [ 649.107906][T19052] lo speed is unknown, defaulting to 1000 [ 649.123867][T19052] lo speed is unknown, defaulting to 1000 [ 649.336921][T19070] xt_socket: unknown flags 0x8 [ 649.413859][T19079] netlink: 'syz.2.3767': attribute type 126 has an invalid length. [ 649.460774][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3769'. [ 650.048022][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3770'. [ 650.142296][ T3599] hsr_slave_0: left promiscuous mode [ 650.161814][ T3599] hsr_slave_1: left promiscuous mode [ 650.176161][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.198695][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.223428][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.252111][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.346250][ T5843] Bluetooth: hci1: command tx timeout [ 650.366227][ T3599] veth1_macvtap: left promiscuous mode [ 650.377668][ T3599] veth0_macvtap: left promiscuous mode [ 650.407448][ T3599] veth1_vlan: left promiscuous mode [ 650.435402][T19117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3773'. [ 650.436154][ T3599] veth0_vlan: left promiscuous mode [ 650.454783][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 650.738974][T19120] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.3775'. [ 650.765215][T19120] netlink: zone id is out of range [ 650.787802][T19120] netlink: zone id is out of range [ 650.823627][T19120] netlink: zone id is out of range [ 650.852314][T19120] netlink: zone id is out of range [ 650.867325][T19120] netlink: zone id is out of range [ 650.885264][T19120] netlink: zone id is out of range [ 650.890442][T19120] netlink: zone id is out of range [ 650.923154][T19120] netlink: zone id is out of range [ 650.928565][T19120] netlink: zone id is out of range [ 650.949493][T19120] netlink: zone id is out of range [ 650.995826][T19123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3776'. [ 651.229022][T19132] netlink: 'syz.2.3778': attribute type 1 has an invalid length. [ 651.252213][T19132] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3778'. [ 651.517799][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 651.564139][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 652.019359][T19052] chnl_net:caif_netlink_parms(): no params data found [ 652.076172][T19123] team0: Port device gtp0 added [ 652.375416][T19145] lo speed is unknown, defaulting to 1000 [ 652.376472][T19052] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.405558][T19052] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.427470][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 652.438096][T19052] bridge_slave_0: entered allmulticast mode [ 652.459793][T19052] bridge_slave_0: entered promiscuous mode [ 652.503201][T19052] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.510426][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.574124][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'. [ 652.592007][T19052] bridge_slave_1: entered allmulticast mode [ 652.609002][T19052] bridge_slave_1: entered promiscuous mode [ 652.764678][T19052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.797805][T19052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.841942][T19156] smc: net device bond0 applied user defined pnetid SYZ2 [ 652.983079][T19145] lo speed is unknown, defaulting to 1000 [ 653.014102][T19052] team0: Port device team_slave_0 added [ 653.026643][T19145] lo speed is unknown, defaulting to 1000 [ 653.036720][T19052] team0: Port device team_slave_1 added [ 653.074148][T19145] lo speed is unknown, defaulting to 1000 [ 653.094276][T19052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.101861][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.166807][T19052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.210862][T19052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.227496][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.281700][T19052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.303750][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3784'. [ 653.490446][T19052] hsr_slave_0: entered promiscuous mode [ 653.512868][T19052] hsr_slave_1: entered promiscuous mode [ 653.519026][T19052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.534198][T19052] Cannot create hsr debugfs directory [ 653.668893][T19177] lo speed is unknown, defaulting to 1000 [ 654.473350][T19190] nr0: left promiscuous mode [ 654.491889][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 654.510926][T19177] lo speed is unknown, defaulting to 1000 [ 654.542507][T19177] lo speed is unknown, defaulting to 1000 [ 654.569104][T19177] lo speed is unknown, defaulting to 1000 [ 654.768430][T19052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.783869][T19052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.802786][T19052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.822919][T19052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.444768][T19052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.513164][T19052] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.574699][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.581932][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.619921][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.627160][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.677001][T19205] __nla_validate_parse: 2 callbacks suppressed [ 655.677024][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3792'. [ 655.718749][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'. [ 655.996899][T19218] lo speed is unknown, defaulting to 1000 [ 656.110175][T19052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.217686][T19052] veth0_vlan: entered promiscuous mode [ 656.235034][T19052] veth1_vlan: entered promiscuous mode [ 656.318078][T19052] veth0_macvtap: entered promiscuous mode [ 656.346888][T19052] veth1_macvtap: entered promiscuous mode [ 656.386517][T19052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.408065][T19052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.441910][T19052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.450734][T19052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.486269][T19052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.497634][T19052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.571762][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 656.578945][T19218] lo speed is unknown, defaulting to 1000 [ 656.587666][T19227] lo speed is unknown, defaulting to 1000 [ 656.707172][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.724209][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.742900][T19218] lo speed is unknown, defaulting to 1000 [ 656.793305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.826726][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.836063][T19218] lo speed is unknown, defaulting to 1000 [ 657.204787][T19229] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3796'. [ 657.231013][T19227] lo speed is unknown, defaulting to 1000 [ 657.292724][T19227] lo speed is unknown, defaulting to 1000 [ 657.446078][T19227] lo speed is unknown, defaulting to 1000 [ 657.959433][T19243] infiniband syz!: set down [ 657.974995][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.985969][T19243] infiniband syz!: added team_slave_0 [ 658.145897][T19243] RDS/IB: syz!: added [ 658.150220][T19243] smc: adding ib device syz! with port count 1 [ 658.158700][T19243] smc: ib device syz! port 1 has pnetid [ 658.632120][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.990609][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.056702][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.146246][ T12] bridge_slave_1: left allmulticast mode [ 659.153381][ T12] bridge_slave_1: left promiscuous mode [ 659.159076][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.167889][ T12] bridge_slave_0: left allmulticast mode [ 659.174087][ T12] bridge_slave_0: left promiscuous mode [ 659.179769][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.511243][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3803'. [ 659.810189][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.823021][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.831054][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.838276][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.850980][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.855515][ T12] bond0 (unregistering): Released all slaves [ 659.859506][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.877364][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 659.885963][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 659.896073][T19265] vlan2: entered allmulticast mode [ 660.039124][T19271] lo speed is unknown, defaulting to 1000 [ 660.228177][T19273] lo speed is unknown, defaulting to 1000 [ 660.417923][T19271] lo speed is unknown, defaulting to 1000 [ 660.435690][T19273] lo speed is unknown, defaulting to 1000 [ 660.445136][T19271] lo speed is unknown, defaulting to 1000 [ 660.496824][T19273] lo speed is unknown, defaulting to 1000 [ 660.499871][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 660.505406][T19271] lo speed is unknown, defaulting to 1000 [ 660.877593][T19295] netlink: 'syz.2.3808': attribute type 10 has an invalid length. [ 660.887469][T19295] netlink: 'syz.2.3808': attribute type 10 has an invalid length. [ 660.895846][T19295] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3808'. [ 660.988597][T19273] lo speed is unknown, defaulting to 1000 [ 661.004166][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3810'. [ 661.027771][T19301] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.046103][T19302] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3808'. [ 661.210551][T19306] netlink: 'syz.3.3811': attribute type 12 has an invalid length. [ 661.758752][T19306] net_ratelimit: 283 callbacks suppressed [ 661.758773][T19306] netlink: zone id is out of range [ 661.834801][T19308] netlink: 'syz.3.3811': attribute type 2 has an invalid length. [ 661.936775][ T5847] Bluetooth: hci1: command tx timeout [ 662.036758][T19314] lo speed is unknown, defaulting to 1000 [ 662.073187][T19308] Tq€!7: entered promiscuous mode [ 662.167967][T19306] netlink: set zone limit has 4 unknown bytes [ 662.286992][ T12] hsr_slave_0: left promiscuous mode [ 662.294992][ T12] hsr_slave_1: left promiscuous mode [ 662.301155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.314532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.330199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.347343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.408732][ T12] veth1_macvtap: left promiscuous mode [ 662.417913][ T12] veth0_macvtap: left promiscuous mode [ 662.436395][ T12] veth1_vlan: left promiscuous mode [ 662.447480][ T12] veth0_vlan: left promiscuous mode [ 662.599830][T19324] s: rxe_newlink: already configured on lo [ 663.540756][ T12] team0 (unregistering): Port device team_slave_1 removed [ 663.609115][ T12] team0 (unregistering): Port device team_slave_0 removed [ 664.027300][ T5847] Bluetooth: hci1: command tx timeout [ 664.295299][T19314] lo speed is unknown, defaulting to 1000 [ 664.321563][T19314] lo speed is unknown, defaulting to 1000 [ 664.351652][T19314] lo speed is unknown, defaulting to 1000 [ 664.551367][T19339] netlink: 'syz.4.3819': attribute type 1 has an invalid length. [ 664.629205][T19339] bond4: entered promiscuous mode [ 664.650390][T19339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.889331][T19343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.896861][T19343] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 664.909249][T19343] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 664.924463][T19343] bond4: (slave ip6gre2): making interface the new active one [ 664.932468][T19343] ip6gre2: entered promiscuous mode [ 664.943839][T19343] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 665.008032][T19273] chnl_net:caif_netlink_parms(): no params data found [ 665.016514][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'. [ 665.178311][T19357] netlink: 'syz.4.3821': attribute type 4 has an invalid length. [ 665.187127][T19357] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3821'. [ 665.396639][T19359] lo speed is unknown, defaulting to 1000 [ 665.437104][T19358] ipt_rpfilter: unknown options [ 665.654637][T19273] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.665233][T19273] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.706053][T19273] bridge_slave_0: entered allmulticast mode [ 665.737131][T19273] bridge_slave_0: entered promiscuous mode [ 665.768975][T19359] lo speed is unknown, defaulting to 1000 [ 665.769170][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.792362][T19273] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.799738][T19273] bridge_slave_1: entered allmulticast mode [ 665.817782][T19273] bridge_slave_1: entered promiscuous mode [ 665.826142][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'. [ 665.837676][T19359] lo speed is unknown, defaulting to 1000 [ 665.966138][T19273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.091748][ T5847] Bluetooth: hci1: command tx timeout [ 666.105481][T19359] lo speed is unknown, defaulting to 1000 [ 666.108534][T19273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.161936][T19273] team0: Port device team_slave_0 added [ 666.171051][T19273] team0: Port device team_slave_1 added [ 666.240580][T19273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.249102][T19273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.280612][T19273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.299094][T19273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.306687][T19273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.336890][T19273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.475523][T19273] hsr_slave_0: entered promiscuous mode [ 666.484975][T19273] hsr_slave_1: entered promiscuous mode [ 666.493304][T19273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.501257][T19273] Cannot create hsr debugfs directory [ 667.210185][T19393] ªªªªª: renamed from bridge0 [ 667.227031][T19393] ªªªªª: entered promiscuous mode [ 667.240845][T19393] ªªªªª: entered allmulticast mode [ 667.934457][T19405] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 667.942622][T19405] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3831'. [ 667.971685][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 667.988757][T19273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 668.034276][T19273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 668.034583][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 668.060089][T19273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 668.120770][T19273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 668.172344][ T5847] Bluetooth: hci1: command tx timeout [ 668.297472][T19422] netlink: 'syz.3.3834': attribute type 4 has an invalid length. [ 668.354115][ T5891] lo speed is unknown, defaulting to 1000 [ 668.361844][T19273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.381172][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3833'. [ 668.395204][T19423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3833'. [ 668.446758][ T5891] lo speed is unknown, defaulting to 1000 [ 668.463596][T19273] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.691284][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.698546][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.729335][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.736519][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.850778][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 668.900965][T19433] openvswitch: netlink: Flow actions attr not present in new flow. [ 669.027600][T19439] lo speed is unknown, defaulting to 1000 [ 669.616132][T19273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.643182][T19439] lo speed is unknown, defaulting to 1000 [ 669.725905][T19439] lo speed is unknown, defaulting to 1000 [ 669.750951][T19273] veth0_vlan: entered promiscuous mode [ 669.792094][T19439] lo speed is unknown, defaulting to 1000 [ 669.800328][T19273] veth1_vlan: entered promiscuous mode [ 669.872202][T19273] veth0_macvtap: entered promiscuous mode [ 669.888818][T19273] veth1_macvtap: entered promiscuous mode [ 669.945003][T19273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.976546][T19273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.048215][T19273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.071903][T19273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.080746][T19273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.097754][T19273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.297889][T19464] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 670.311652][T19464] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 670.321093][T19464] 0ªX¹¦Dö»: entered allmulticast mode [ 670.342920][T19464] 0ªX¹¦Dö»: entered promiscuous mode [ 670.378369][T19467] 0ªX¹¦Dö»: left allmulticast mode [ 670.402177][T19467] 0ªX¹¦Dö»: left promiscuous mode [ 670.410322][T19467] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 670.455003][T19471] netlink: 'syz.2.3842': attribute type 1 has an invalid length. [ 670.463191][T19471] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3842'. [ 670.478317][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.532374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.685761][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.701547][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.770095][T19478] netlink: 'syz.2.3844': attribute type 1 has an invalid length. [ 670.779114][T19478] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3844'. [ 671.169629][T19485] netlink: 'syz.0.3846': attribute type 4 has an invalid length. [ 671.177806][T19485] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3846'. [ 671.247420][T19485] lo speed is unknown, defaulting to 1000 [ 671.705733][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.764231][T19485] lo speed is unknown, defaulting to 1000 [ 671.792572][T19485] lo speed is unknown, defaulting to 1000 [ 671.799919][T19485] lo speed is unknown, defaulting to 1000 [ 671.967614][T19487] ipt_rpfilter: unknown options [ 672.035853][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.375743][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.473677][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.558240][ T35] bridge_slave_1: left allmulticast mode [ 672.565300][ T35] bridge_slave_1: left promiscuous mode [ 672.571081][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.583968][ T35] bridge_slave_0: left allmulticast mode [ 672.589625][ T35] bridge_slave_0: left promiscuous mode [ 672.614523][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.999526][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.012995][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.024066][ T35] bond0 (unregistering): Released all slaves [ 673.388834][T19511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3850'. [ 673.470920][T19514] openvswitch: netlink: Invalid VLAN frame [ 673.565902][T19511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3850'. [ 673.885133][T19516] syzkaller1: entered promiscuous mode [ 673.907252][T19516] syzkaller1: entered allmulticast mode [ 673.973682][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 673.983398][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.082007][ T68] syzkaller1: tun_net_xmit 70 [ 674.172320][ T975] page_pool_release_retry() stalled pool shutdown: id 187, 1 inflight 60 sec [ 674.181587][ T5891] syzkaller1: tun_net_xmit 90 [ 674.281631][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.297066][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.306886][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 674.317278][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.550280][T19525] lo speed is unknown, defaulting to 1000 [ 674.641458][ T35] hsr_slave_0: left promiscuous mode [ 674.654069][ T35] hsr_slave_1: left promiscuous mode [ 674.674523][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.711889][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.747930][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.764488][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.889565][ T35] veth1_macvtap: left promiscuous mode [ 674.910950][ T35] veth0_macvtap: left promiscuous mode [ 674.928957][ T35] veth1_vlan: left promiscuous mode [ 674.946465][ T35] veth0_vlan: left promiscuous mode [ 675.875995][ T35] team0 (unregistering): Port device team_slave_1 removed [ 675.939639][ T35] team0 (unregistering): Port device team_slave_0 removed [ 676.033876][T19553] netlink: 'syz.2.3860': attribute type 4 has an invalid length. [ 676.041927][T19553] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3860'. [ 676.415447][ T5843] Bluetooth: hci1: command tx timeout [ 676.490613][T19556] ipt_rpfilter: unknown options [ 676.499056][T19525] lo speed is unknown, defaulting to 1000 [ 676.537085][T19550] lo speed is unknown, defaulting to 1000 [ 676.547250][T19525] lo speed is unknown, defaulting to 1000 [ 676.566594][T19525] lo speed is unknown, defaulting to 1000 [ 676.855945][T19555] lo speed is unknown, defaulting to 1000 [ 676.865519][T19550] lo speed is unknown, defaulting to 1000 [ 676.892906][T19550] lo speed is unknown, defaulting to 1000 [ 676.924119][T19550] lo speed is unknown, defaulting to 1000 [ 677.125668][T19555] lo speed is unknown, defaulting to 1000 [ 677.160475][T19555] lo speed is unknown, defaulting to 1000 [ 677.205120][T19568] netlink: 'syz.3.3865': attribute type 5 has an invalid length. [ 677.233696][T19555] lo speed is unknown, defaulting to 1000 [ 677.290456][T19572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3866'. [ 677.488538][T19577] tipc: Resetting bearer [ 677.538206][ T5891] lo speed is unknown, defaulting to 1000 [ 677.674151][T19572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.706337][ T5891] lo speed is unknown, defaulting to 1000 [ 677.721676][T19525] chnl_net:caif_netlink_parms(): no params data found [ 677.737737][ T5169] lo speed is unknown, defaulting to 1000 [ 678.044300][T19525] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.055771][T19525] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.092595][T19525] bridge_slave_0: entered allmulticast mode [ 678.107678][T19525] bridge_slave_0: entered promiscuous mode [ 678.206871][T19525] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.226861][T19525] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.245930][T19525] bridge_slave_1: entered allmulticast mode [ 678.279087][T19525] bridge_slave_1: entered promiscuous mode [ 678.385521][T19525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.419701][T19525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.492621][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 678.647626][T19525] team0: Port device team_slave_0 added [ 678.715073][T19525] team0: Port device team_slave_1 added [ 678.949697][T19525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.979598][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.016100][T19525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.042811][T19525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.049842][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.084906][T19525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.246625][T19525] hsr_slave_0: entered promiscuous mode [ 679.271189][T19525] hsr_slave_1: entered promiscuous mode [ 679.293650][T19525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.317434][T19525] Cannot create hsr debugfs directory [ 679.629656][T19630] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 679.652809][T19630] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3881'. [ 679.883078][T19639] lo speed is unknown, defaulting to 1000 [ 679.944172][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3886'. [ 680.389263][T19639] lo speed is unknown, defaulting to 1000 [ 680.403113][T19639] lo speed is unknown, defaulting to 1000 [ 680.418429][T19639] lo speed is unknown, defaulting to 1000 [ 680.572117][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 680.658844][T19525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 680.708186][T19525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.735693][T19525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.756172][T19525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.966163][T19525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.022470][T19525] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.043872][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.051056][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.090135][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.097321][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.449937][T19673] lo speed is unknown, defaulting to 1000 [ 681.532964][T19678] netlink: 'syz.3.3896': attribute type 1 has an invalid length. [ 681.542329][T19678] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3896'. [ 681.577714][T19525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.712506][T19525] veth0_vlan: entered promiscuous mode [ 681.740132][T19525] veth1_vlan: entered promiscuous mode [ 681.795665][T19525] veth0_macvtap: entered promiscuous mode [ 681.820675][T19525] veth1_macvtap: entered promiscuous mode [ 681.892995][T19525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.937497][T19525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.969555][T19525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.988609][T19525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.015006][T19525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.045326][T19525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.242780][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.250659][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.306065][T19683] lo speed is unknown, defaulting to 1000 [ 682.312357][T19673] lo speed is unknown, defaulting to 1000 [ 682.347127][T19673] lo speed is unknown, defaulting to 1000 [ 682.368469][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.389373][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.396859][T19673] lo speed is unknown, defaulting to 1000 [ 682.651692][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 682.778777][T19685] ------------[ cut here ]------------ [ 682.785383][T19685] WARNING: CPU: 0 PID: 19685 at fs/kernfs/dir.c:526 kernfs_get+0x71/0x90 [ 682.794193][T19685] Modules linked in: [ 682.798138][T19685] CPU: 0 UID: 0 PID: 19685 Comm: syz.3.3897 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 682.809302][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 682.819650][T19685] RIP: 0010:kernfs_get+0x71/0x90 [ 682.824789][T19685] Code: 23 e8 63 22 5b ff 48 89 df be 04 00 00 00 e8 46 62 c2 ff f0 ff 03 eb 05 e8 4c 22 5b ff 5b 5d c3 cc cc cc cc e8 40 22 5b ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 46 [ 682.844960][T19685] RSP: 0018:ffffc9000459f5e0 EFLAGS: 00010287 [ 682.851074][T19685] RAX: ffffffff82669520 RBX: ffff88805da33f00 RCX: 0000000000080000 [ 682.859364][T19685] RDX: ffffc9000ea30000 RSI: 0000000000001111 RDI: 0000000000001112 [ 682.867454][T19685] RBP: 0000000000000000 R08: ffffffff826694f4 R09: 1ffff1100bb467e0 [ 682.875801][T19685] R10: dffffc0000000000 R11: ffffed100bb467e1 R12: dffffc0000000000 [ 682.884053][T19685] R13: ffff888027c9e480 R14: ffffffff8ca68f10 R15: ffff888027c9e4b0 [ 682.892279][T19685] FS: 00007f2215e536c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 682.901257][T19685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.908677][T19685] CR2: 00007fdb39bf0440 CR3: 0000000029212000 CR4: 00000000003526f0 [ 682.917036][T19685] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 682.925677][T19685] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 682.934036][T19685] Call Trace: [ 682.937351][T19685] [ 682.940312][T19685] ? __warn+0x165/0x4d0 [ 682.945136][T19685] ? kernfs_get+0x71/0x90 [ 682.949524][T19685] ? report_bug+0x2b3/0x500 [ 682.954301][T19685] ? kernfs_get+0x71/0x90 [ 682.958689][T19685] ? handle_bug+0x60/0x90 [ 682.963300][T19685] ? exc_invalid_op+0x1a/0x50 [ 682.968032][T19685] ? asm_exc_invalid_op+0x1a/0x20 [ 682.973731][T19685] ? kernfs_get+0x44/0x90 [ 682.978120][T19685] ? kernfs_get+0x70/0x90 [ 682.982565][T19685] ? kernfs_get+0x71/0x90 [ 682.987083][T19685] kobject_add_internal+0x4ba/0x8d0 [ 682.992518][T19685] kobject_add+0x152/0x220 [ 682.997005][T19685] ? __pfx_kobject_add+0x10/0x10 [ 683.002369][T19685] ? __kasan_kmalloc+0x98/0xb0 [ 683.007204][T19685] ? kobject_init+0x83/0x1f0 [ 683.011936][T19685] get_device_parent+0x391/0x410 [ 683.016929][T19685] device_add+0x325/0xbf0 [ 683.021307][T19685] ? device_initialize+0x266/0x460 [ 683.026623][T19685] netdev_register_kobject+0x157/0x2f0 [ 683.032527][T19685] register_netdevice+0x12c3/0x1b60 [ 683.037803][T19685] ? __pfx_register_netdevice+0x10/0x10 [ 683.043444][T19685] ? __kvmalloc_node_noprof+0x72/0x190 [ 683.048961][T19685] ? dev_addr_mod+0xf1/0x430 [ 683.053909][T19685] ? __asan_memset+0x23/0x50 [ 683.058566][T19685] register_netdev+0x40/0x50 [ 683.063603][T19685] bnep_add_connection+0x823/0xe10 [ 683.068775][T19685] ? __pfx_bnep_add_connection+0x10/0x10 [ 683.074502][T19685] ? __fget_files+0x395/0x410 [ 683.079245][T19685] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 683.084407][T19685] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 683.090253][T19685] ? tomoyo_path_number_perm+0x5dd/0x770 [ 683.096460][T19685] ? tomoyo_path_number_perm+0x5dd/0x770 [ 683.102222][T19685] ? __lock_acquire+0x1397/0x2100 [ 683.107327][T19685] sock_do_ioctl+0x158/0x460 [ 683.112055][T19685] ? __pfx_sock_do_ioctl+0x10/0x10 [ 683.117241][T19685] sock_ioctl+0x626/0x8e0 [ 683.121949][T19685] ? __pfx_sock_ioctl+0x10/0x10 [ 683.126845][T19685] ? __fget_files+0x2a/0x410 [ 683.131771][T19685] ? __fget_files+0x2a/0x410 [ 683.136420][T19685] ? __pfx_sock_ioctl+0x10/0x10 [ 683.141312][T19685] __se_sys_ioctl+0xf5/0x170 [ 683.146052][T19685] do_syscall_64+0xf3/0x230 [ 683.150639][T19685] ? clear_bhb_loop+0x35/0x90 [ 683.155738][T19685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.161869][T19685] RIP: 0033:0x7f2214f8cde9 [ 683.166402][T19685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.186392][T19685] RSP: 002b:00007f2215e53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.195086][T19685] RAX: ffffffffffffffda RBX: 00007f22151a6160 RCX: 00007f2214f8cde9 [ 683.203352][T19685] RDX: 00004000000000c0 RSI: 00000000400442c8 RDI: 000000000000000c [ 683.211874][T19685] RBP: 00007f221500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 683.219905][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.227993][T19685] R13: 0000000000000000 R14: 00007f22151a6160 R15: 00007ffdfb6c14e8 [ 683.236121][T19685] [ 683.239198][T19685] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 683.246505][T19685] CPU: 0 UID: 0 PID: 19685 Comm: syz.3.3897 Not tainted 6.14.0-rc2-syzkaller-00535-g4991b88c2514 #0 [ 683.257287][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 683.267365][T19685] Call Trace: [ 683.270669][T19685] [ 683.273623][T19685] dump_stack_lvl+0x241/0x360 [ 683.278339][T19685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.283576][T19685] ? __pfx__printk+0x10/0x10 [ 683.288197][T19685] ? _printk+0xd5/0x120 [ 683.292383][T19685] ? __init_begin+0x41000/0x41000 [ 683.297438][T19685] ? vscnprintf+0x5d/0x90 [ 683.301791][T19685] panic+0x349/0x880 [ 683.305718][T19685] ? __warn+0x174/0x4d0 [ 683.309897][T19685] ? __pfx_panic+0x10/0x10 [ 683.314356][T19685] __warn+0x344/0x4d0 [ 683.318352][T19685] ? kernfs_get+0x71/0x90 [ 683.322695][T19685] report_bug+0x2b3/0x500 [ 683.327036][T19685] ? kernfs_get+0x71/0x90 [ 683.331384][T19685] handle_bug+0x60/0x90 [ 683.335560][T19685] exc_invalid_op+0x1a/0x50 [ 683.340075][T19685] asm_exc_invalid_op+0x1a/0x20 [ 683.344936][T19685] RIP: 0010:kernfs_get+0x71/0x90 [ 683.349890][T19685] Code: 23 e8 63 22 5b ff 48 89 df be 04 00 00 00 e8 46 62 c2 ff f0 ff 03 eb 05 e8 4c 22 5b ff 5b 5d c3 cc cc cc cc e8 40 22 5b ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 46 [ 683.369507][T19685] RSP: 0018:ffffc9000459f5e0 EFLAGS: 00010287 [ 683.375582][T19685] RAX: ffffffff82669520 RBX: ffff88805da33f00 RCX: 0000000000080000 [ 683.383556][T19685] RDX: ffffc9000ea30000 RSI: 0000000000001111 RDI: 0000000000001112 [ 683.391540][T19685] RBP: 0000000000000000 R08: ffffffff826694f4 R09: 1ffff1100bb467e0 [ 683.399526][T19685] R10: dffffc0000000000 R11: ffffed100bb467e1 R12: dffffc0000000000 [ 683.407504][T19685] R13: ffff888027c9e480 R14: ffffffff8ca68f10 R15: ffff888027c9e4b0 [ 683.415485][T19685] ? kernfs_get+0x44/0x90 [ 683.419824][T19685] ? kernfs_get+0x70/0x90 [ 683.424169][T19685] kobject_add_internal+0x4ba/0x8d0 [ 683.429387][T19685] kobject_add+0x152/0x220 [ 683.433820][T19685] ? __pfx_kobject_add+0x10/0x10 [ 683.438775][T19685] ? __kasan_kmalloc+0x98/0xb0 [ 683.443554][T19685] ? kobject_init+0x83/0x1f0 [ 683.448160][T19685] get_device_parent+0x391/0x410 [ 683.453123][T19685] device_add+0x325/0xbf0 [ 683.457467][T19685] ? device_initialize+0x266/0x460 [ 683.462596][T19685] netdev_register_kobject+0x157/0x2f0 [ 683.468072][T19685] register_netdevice+0x12c3/0x1b60 [ 683.473297][T19685] ? __pfx_register_netdevice+0x10/0x10 [ 683.478859][T19685] ? __kvmalloc_node_noprof+0x72/0x190 [ 683.484328][T19685] ? dev_addr_mod+0xf1/0x430 [ 683.488954][T19685] ? __asan_memset+0x23/0x50 [ 683.493572][T19685] register_netdev+0x40/0x50 [ 683.498175][T19685] bnep_add_connection+0x823/0xe10 [ 683.503308][T19685] ? __pfx_bnep_add_connection+0x10/0x10 [ 683.508954][T19685] ? __fget_files+0x395/0x410 [ 683.513651][T19685] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 683.518690][T19685] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 683.524255][T19685] ? tomoyo_path_number_perm+0x5dd/0x770 [ 683.529903][T19685] ? tomoyo_path_number_perm+0x5dd/0x770 [ 683.535550][T19685] ? __lock_acquire+0x1397/0x2100 [ 683.540597][T19685] sock_do_ioctl+0x158/0x460 [ 683.545203][T19685] ? __pfx_sock_do_ioctl+0x10/0x10 [ 683.550337][T19685] sock_ioctl+0x626/0x8e0 [ 683.554676][T19685] ? __pfx_sock_ioctl+0x10/0x10 [ 683.559702][T19685] ? __fget_files+0x2a/0x410 [ 683.564329][T19685] ? __fget_files+0x2a/0x410 [ 683.568932][T19685] ? __pfx_sock_ioctl+0x10/0x10 [ 683.573786][T19685] __se_sys_ioctl+0xf5/0x170 [ 683.578378][T19685] do_syscall_64+0xf3/0x230 [ 683.582900][T19685] ? clear_bhb_loop+0x35/0x90 [ 683.587586][T19685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.593489][T19685] RIP: 0033:0x7f2214f8cde9 [ 683.597910][T19685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.617527][T19685] RSP: 002b:00007f2215e53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.625957][T19685] RAX: ffffffffffffffda RBX: 00007f22151a6160 RCX: 00007f2214f8cde9 [ 683.633934][T19685] RDX: 00004000000000c0 RSI: 00000000400442c8 RDI: 000000000000000c [ 683.641912][T19685] RBP: 00007f221500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 683.649886][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.657854][T19685] R13: 0000000000000000 R14: 00007f22151a6160 R15: 00007ffdfb6c14e8 [ 683.665840][T19685] [ 683.669221][T19685] Kernel Offset: disabled [ 683.673709][T19685] Rebooting in 86400 seconds..