last executing test programs: 1m5.764619303s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 53.538819096s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) 52.873135804s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 43.340075942s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) 41.183820115s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 33.340515376s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) 31.501891389s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 22.031666766s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) 20.374548627s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 10.571150101s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) 9.655838249s ago: executing program 0 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248954a06493f2709e9baf2f3f1de5a761ca0ee2c28d45a01ec3fa8539e7223c278f250835685db59cf6de9c2a0496da59a4fcf3d9ceb00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xe9c}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) 1.606017737s ago: executing program 3 (id=3218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="bd4e54d45303", @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @dev, @local, @multicast2}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB='\tR'], 0x1c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1.501739899s ago: executing program 4 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x1b000000, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0x64}}, 0x20000080) 1.319553566s ago: executing program 1 (id=3220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x5, 0x2) splice(r0, &(0x7f0000000040)=0x6, r1, &(0x7f0000000080)=0x8000, 0x8, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x50, 0x8}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0xb) 1.174297602s ago: executing program 3 (id=3221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0x51, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x68}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="34002f801c00038008000400050000dd070001000000000008000100020000000c0002000200aaaaaaaaaaaa0800010006"], 0x50}, 0x1, 0x0, 0x0, 0x5396ebcf88d913b0}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mail_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x8800) 1.135905687s ago: executing program 4 (id=3222): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x7ffd, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x20000010) 1.008440075s ago: executing program 1 (id=3223): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x45, 0x11, 0x0, 0x0, @binary="fedcbb7d1d11c6d3139ebb7290e4d8a1c39156c2a7ef6ad7ecb70f506210f4f53fcc5cf5ca0895a0abb6ba14702d4f56729b90a05e1954183363e3e4b2103c9e3e"}]}, 0x5c}], 0x1, 0x0, 0x0, 0x8800}, 0x20000850) 882.269957ms ago: executing program 1 (id=3224): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0xe}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0xe}, &(0x7f0000000100)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 798.759775ms ago: executing program 3 (id=3225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0xd4, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf82a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x440}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0) r5 = socket(0x25, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 734.506655ms ago: executing program 4 (id=3226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000200000000000000faffffff006112d000000000009f00400000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @remote}, &(0x7f0000000300)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c004) 605.953784ms ago: executing program 4 (id=3227): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) (async) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[], 0x0) 543.213431ms ago: executing program 3 (id=3228): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="9e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae921e3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90", 0xa8}, {&(0x7f0000001700)="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", 0x295}], 0x2}}], 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="0b80b4a9fd1a841e7ce53bb3c74b40a31df8b06042a92b0c459c4d8ab04fd3e71f0bdc25748f2d54b1f79ebe0130c471e65dadf223e712e6f9e2b4a0d776edc96d589d4f04ee6276ebb851fa5d39ffd28b2f64123e85230ffcd80b0d95a8859209cad6ee1e18daffc436d166342f1f8aee3bef46e07b51ff7b7c97e4c771b66841826c662b3fd707ddf8919d9e57ca50cedf5671fc56936fa4dda132ce3ed11fefaed8dd836f46dd23eaf699c1ec2c6ed5cd0d9e6c1a217c0bb04dbd7c2d903fb85100396edb7db48c7e54d2938fc95f298c8ccff1a2c15f4baa640f449aa387e63ec1c34c8d5002a51b45b2f03424d084b56d6d468d1eb1b42114d42f5f45815f34788ef01f46655445fb27c9695cdee74c3355ec9547e1b8afe25edf9a99f00dd893f671891088f7ddf4d02b176fe3b29c99370de79b5950607948a96337ba5dcbd9c73f9146fcefcc7adf78bc1d117c915c82e4c83ba640ad260df77718ace1fd7893640f96cbbd3caf3fe3a0492af69c5210466c201f70994436de5435f85e68aff68c1aafaeb602475902c63aaf09e283a02b1f4e2e4fca2c06ebc24a5961a9669518793b0c6f5bd9a64af2f1924de22233f1df5e478a12e1c1e86af745ee32616802eac1cabbb481244f3c7f76f80e97de0a089c43df4484ef0c4713215f2c19fce55e3b81a7f1de295d8963d8bbed73c516c6a9d7710780a4eb7c717389061ddbcaf6c82f69459ece3d272bb3b5e1f7d656303c8350f30180c802965bc409b86fd51c1420c6b88c06f97c297923a5bf404aed5bf1ef551b00cf5dcaec46e54535182358d3c5f57b8214d9f64b48c857f2b2cc315194f8b0217356222991313b599d69e6b88b7b61ee58371a35a5915eba3d901bdb670ac7608eb6886936d3c2c7a074c0d1170e584567a3c61c560c5bd3de9e01a9916ba31fcfef90a808a732878e8d953ae7a0c48940eb95d588c5bba41b3c8837e47a696f4fcf84fa5c24d0414ccbdf227d5c7915f107f5e581de7941e454ea3c475398499506a5c1f86475c31de210793b71e22347d798e101b59d155379cedf5e4824ac672fa9538693caf6345ca4ccc267a0429118ea474096a48af5ec72d3e0b7021bfcce67e304b61b65b1d3e4c901a4c6940f9162c0e750d9a912967b5fcb2ac8d0a19c0310b7e4690bcd9aef010c35070b34f42e4fa2b3538cc236d40cf5dacaaae2595a5680c1574711f93185978f1f7a8bcf340a76c48627efe44a9f686ed94089f227270d3887d0434d1813b95cdbf377fe9a3a05cf0acfae3bcd1032915701a99e5d24e730d39b64259af0750c4a1cdbec000c39642a164fca34d6e70daebb00599876d3005820b4b207457494ba4c1099fa7b97af3517ad6deb4fbcc292576a2600544d31d5055c9402a13e8eac9a0fd0b5afa47b05a0e36b105f446778cde69131f98b674ab68e8e853d3b38ef6e9f58c2f635a9c7bcd692a32edfa32888ad885ed97aa2ffa674b6b62e8761db52587b4460f19c94256e4e16c40d8693d3dc23b2c1ec014cbf084d172251aa5426590475bffd2baa7fd2767260098dd9f387a567b755c08e1e828a663e5294a907d20d0d10377797ad784e7d82799810e77c222bf8142e345b4403051158f474d3bcb26b4acdcd78d1bd9f3f0868d45caa5042ebe0204b0423f2060f9305ad136cdaa0e9a6ed3f22866796762fe9262ebe72fe16913d74bec77f3683bf5148fb06f31a8e3d0731bb96b0cf8d6f503cf449039803304e5a76d58b6d3f035e1407f9fb30435760a904b3a35d3d930ce2ad7c8a9f78bd56d603942e78a5f80009f0b9b97b67babe470c66f217c66ab8a4a73f3e24531e1b05ea1388b5b5218a58b91990a26ddfb7f3e3e4fa5ff3fd821faa7058fd3d3dc56660b1087fc85235f0a9dbaa7404b4768a17a038d62d766b7557bb550357fb52c722dedc764234c8a9cf6b0b72eda84ef94a840af55d46f654afa5d53af012c752dd49815c187e263f2c2078dee21348edd847f2bf63d03c21c4166fc0c2232f37d9456cada14b3d6fe0919e7e918d9474d7c75ac712056ed058f6c535f66a674486347f991c0dbe09a0b98da7088c56c49cadaccad5eb2e2b8885f81a429c758f01ffe3c8e347cb2c2f6b489ed3090059292511597d7194b616b09759552b87334468d83e4eb29f57fe89698aacb22180ed525f624f8c06afc5f01251f13aba1768c018fa5d3bfe73f1b7d838a0ebce501d9881740572e31db0234091f6bb118df84079fd00328c2fbaba400eace1b8ca07431d19de0cb9aebd906cdc6e901bc141a52ebe1469af5be4f71417fa8da41a84f87180a522d7f0327cf36a4b674a4ea0bf3ac123e5a8d1a707211a9ae2af5b784c9898202605ba1208432ba0cf1495ade1940ae2b47b90471e1be47fc04ed9b7abbcde0eaad8166268360636e64e23935952c006649a18d82a03d3452ee1fff2ff83fc1b95a5cff11ddbb89f1dbb8b1fe0b1b1dc2ddfa3fe443864650f6aed61bf9f22d14b1c28d680ad337ef354057c1c2b21ed831ea822f15081ff426aaab9abff4f6d38d9cd1670877f1ce926e0486d89e222a0d501b5b80ba18ef86c76ad1890a669ae78f2bdf550dc69ef464526a805c0776386eb16ab5483e8576415409c9eb6900d1439ab445ab9cb03b8bc5f35bbc211df15a967760bd4962cd8282833bdf528cd0d579a221c683615938f2e0cae27a22f7a910ac31f614a025a2e329a1e2dbea604524200055e575f480f0d80cb60ea5616ae95bd7d48df17592b35e5b7c2804e2ad24b9d2173e0d28771b79321fe12d654a8816eda24ae85df98a79e4eb007fcb94abdad65f4e60c81be49735b9b7b41d5d2ef6afbbdcce80b94d212a01482184ea4b96e05fb8794474333cd6d406e0ebbfcb975ff3ec113682bcdd6e43e275c54769ee72647eb6787f1de39441b5d2c417987a318900c73aec38df5375ecd51cb5e86aed24d3e03876e7591e173ed34daa85e059323e569486f6a370283320b199d9cae04aaae708aa97e19daed69306512c214cf066bed83a50fbe980b4f178eda9a79c8fc0e514440e9", 0x883}], 0x1}}], 0x1, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="6207169fa7daad", 0x7}], 0x1}}], 0x1, 0x4000854) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="00f8b525", @ANYRES16=r3, @ANYBLOB="050027bd3000080000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0400cc0004001e01040008010a0034000202020202020000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 429.192773ms ago: executing program 1 (id=3229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x314, 0x30, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{0x300, 0x1, [@m_nat={0xbc, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x154, 0x13, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x10000000, 0x8, 0x9}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x84, 0x0, 0x0, 0x5, 0x6}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x20000000, 0x9, 0x10}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6e54, 0x1, 0xff, 0x9}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x3, 0x5, 0x200, 0x1}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ef, 0x40, 0x8, 0x96, 0x1000}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0x5, 0x6}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf, 0x2, 0x7, 0x10}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x4, 0x3, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xbace, 0x20000000, 0x5, 0x6}, 0x55}}]}, {0xd, 0x6, "e38eb63fbdb3bc45bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xac, 0x1e, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x3, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}]}, {0x4d, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce590"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x40, 0x11, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x314}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000030c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000100)="bea50651b0bcb394ffcd58aae2d524b8ac7716375c0c4b3ab2b029782b5ca2c8df6e52aa1870f4e75496cf6ad29918857178", 0x32) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000042dac6ac6df74ca6e0b22f08000000340001002d0000000000000000000000f8ad863d2a98174a631e58efac60d6be02b61aa7a5e06498"], 0x14}, 0x1, 0x0, 0x0, 0x4004811}, 0x40000) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0021074}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25600000000600b100020000000600b100970000000600b100ff7f00007e002a00dd78b4f424bc2057118a025f539974072f66af4f91dcfb84eebc96845062359f70c31c6df09e6fb10bcf7225046870fb113fde5c72a9ee344d075ae8f0eb096b845faecee15bafcdfbc17d0f81aed2a66c92162fcf614a31cd82b05a5cfd05d47634ea31d6ba3deee247ba52a2e718c3fb88315aefd5be2011dc000026002a0072060303030303036804040003006512505050505050ffffffffffff0802110000010000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000005}, 0x4055) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r8, 0x3, {0x0, 0x1, 0x3}, 0xfd}, 0x18) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 426.216107ms ago: executing program 4 (id=3230): syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde10000000000119078007f00000000000000004e220018907804000000000000fb0000000000000000"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300184e6f24ad655e4b0974a844fd", @ANYRES32=r2, @ANYBLOB="28005080110001004abe725c86ec8ce9c3a8f66b0000000005000200020000000800030008ac0f00"], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0500"], 0x10) socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@deltfilter={0x3c, 0x2d, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xa, 0xb}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x84}]}, 0x3c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000405ab6e87f97f1cc5b901a24b3842cdfbd1a84eea5", @ANYRES16=r6, @ANYBLOB="64c22dbd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x85) 292.217175ms ago: executing program 3 (id=3231): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x4, 0x8000000000000001, 0x1}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f00000000c0)=""/119, 0x77}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000400)={@remote, @remote}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth0_to_hsr\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x8000, 0x61, 0xe, 0x1, {{0x24, 0x4, 0x2, 0x39, 0x90, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0xaa, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@loopback}, {@local, 0x58c33841}, {@private=0xa010100, 0x100}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@empty, 0x80000000}]}, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x3, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfff}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x1d8}]}, @cipso={0x86, 0x11, 0x1, [{0x0, 0xb, "865ef433af995dc95b"}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x7, "6f10286111"}]}, @ra={0x94, 0x4}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xb, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x7, 0x3, 0x47, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8000, 0x2, 0x7}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x1, 0x50f3cc82a4fafcc0, 0x6, 0xfffffc00, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x64, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xef, 0x0, 0xb, [0x2]}, @generic={0x83, 0xd, "7e3fdc9dfaa3653003141f"}, @timestamp={0x44, 0xc, 0xd5, 0x0, 0x0, [0x6be, 0x5]}, @timestamp_prespec={0x44, 0x24, 0xb, 0x3, 0x3, [{@loopback, 0xc}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0xfffffffd}, {@multicast2, 0x9}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={r0, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001000)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x260, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x24044040}, 0x4) (async) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000001080)={0x3, &(0x7f0000001040)=[{0x5, 0x95, 0x1, 0x3}, {0x7, 0x4, 0x6, 0xd8}, {0x6, 0x2, 0x7, 0x2}]}) (async) ioctl(r1, 0x7, &(0x7f00000010c0)="2a29ff5302268d42adfa8f3b79a1a52932006b0838b404239e3f66b12b7b23d6f42c650c513b32d5899594fbdf4fc6e7c2d6e8695da313b6188a7e7c3a89c695f11e27585bdd259d596f1c735fabacbaeb02703dc9d1912e5a9b21af0aee3ff10c6b2adb6aace0becb081787c773650984782e7fd6d4dcb92bca028afefc7ccd") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x0, 0x2, 0x0, 0x3, 0x5}, &(0x7f0000001200)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001240)={r16, 0x216}, &(0x7f0000001280)=0xc) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000012c0), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@cgroup=r4, 0x2, 0x0, 0x3, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)={@ifindex=r8, r4, 0x37, 0x2010, 0x0, @value=r4, @void, @void, @void, r17}, 0x20) 232.115348ms ago: executing program 1 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x1c000000, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0x64}}, 0x20000080) 15.210188ms ago: executing program 3 (id=3233): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) write(r1, &(0x7f0000000340)='#\x00\x00\x00', 0x4) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x8, 0x4, 0x8, 0xff, 0x40e3, 0x401, 0x5, r10}, 0x20) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r10, 0x31, "9fd68c453c5e00a3a6c8adc12f5f907c1f5911157d0d1dfff39c65d7679e14e5ee0070e58ecdbaffd1b4176bb61c416c54"}, &(0x7f0000000100)=0x39) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa}, @IFLA_VFINFO_LIST={0xfffffd25, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x0) 12.281305ms ago: executing program 4 (id=3234): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) r2 = accept(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="d400000009060108000000000000000007000008340007800900130073797a31000000000900130073797a30000000001800168014000240200100000000000000004000000000024c0007800c00148008000140ac1414bb05000300060000001400170076657468305f746f5f7465616d00b1000c00184000000000000001001400170070696d7265673000000000000000000005000100050000000500010007000000300008801c0007801800148014000240fc0000000000000000000000000000757287247d18823ab73506371db75c0010"], 0xd4}}, 0x4004004) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES32, @ANYBLOB="0b000080970064086860ff00910001"], 0xb8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 11.740246ms ago: executing program 1 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x5}], 0x4, 0x20, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2d", @ANYRESOCT=r1], 0x20}}, 0x20004000) 0s ago: executing program 2 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1903000000000000e5ff490000000f00a8007365636f6e646e616d650000"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): _1 [ 317.803327][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.853506][T15311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.912076][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2557'. [ 317.921978][T15418] vxcan1: tx address claim with different name [ 318.141300][T15311] hsr_slave_0: entered promiscuous mode [ 318.147822][T15311] hsr_slave_1: entered promiscuous mode [ 318.153944][T15311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.161948][T15311] Cannot create hsr debugfs directory [ 318.375673][T15148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.486466][T15148] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.497688][T15433] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 318.528209][T15430] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 318.544636][T15430] netlink: 'syz.4.2563': attribute type 3 has an invalid length. [ 318.552410][T15430] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2563'. [ 318.608690][T15433] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.620256][T15433] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.665129][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.672253][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.682018][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2566'. [ 318.701080][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.708250][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.753676][ T6232] IPVS: stop unused estimator thread 0... [ 318.781324][T15438] bridge_slave_1: left allmulticast mode [ 318.789657][T15438] bridge_slave_1: left promiscuous mode [ 318.805764][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.817979][T15438] : left promiscuous mode [ 318.822977][T15438] bridge0: port 1() entered disabled state [ 319.096646][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 319.166053][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 319.203484][T15468] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2574'. [ 319.224260][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2572'. [ 319.278130][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 319.290854][T15468] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 319.331779][T15311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.373594][T15311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.416857][T15311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.450207][T15311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.521532][T15148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.653882][T15148] veth0_vlan: entered promiscuous mode [ 319.688424][T15148] veth1_vlan: entered promiscuous mode [ 319.714955][ T5841] Bluetooth: hci0: command tx timeout [ 319.760120][T15311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.780614][T15148] veth0_macvtap: entered promiscuous mode [ 319.817380][T15148] veth1_macvtap: entered promiscuous mode [ 319.858665][T15311] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.908465][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.915642][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.938277][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.945428][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.989553][T15148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.029315][T15148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.037830][T15311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.063384][T15148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.073587][T15148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.086547][T15148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.095528][T15148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.239682][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.262670][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.313605][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2587'. [ 320.331737][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.356385][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.419195][T15311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.509899][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 320.543763][T15515] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2590'. [ 320.710228][T15311] veth0_vlan: entered promiscuous mode [ 320.738980][T15311] veth1_vlan: entered promiscuous mode [ 320.803325][T15311] veth0_macvtap: entered promiscuous mode [ 320.823462][T15311] veth1_macvtap: entered promiscuous mode [ 320.832945][T15529] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.859208][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.892667][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.915867][T15311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.951001][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.976646][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.005780][T15311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.034905][T15539] veth0: entered promiscuous mode [ 321.058347][T15311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.080522][T15311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.104427][T15311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.117399][T15311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.200000][ T6237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.306189][T15539] veth0: left promiscuous mode [ 321.378903][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.404308][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.430873][ T6237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.457026][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.465939][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.658964][ T6237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.888855][ T6237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.119526][ T6237] bridge_slave_1: left allmulticast mode [ 322.125345][ T6237] bridge_slave_1: left promiscuous mode [ 322.132446][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.143038][ T6237] bridge_slave_0: left allmulticast mode [ 322.149084][ T6237] bridge_slave_0: left promiscuous mode [ 322.154825][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.716245][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.727486][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.740496][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.759804][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.778573][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.791509][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.294725][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.315527][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.323311][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.325736][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.341410][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.343152][ T6237] bond0 (unregistering): Released all slaves [ 323.357728][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.366941][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.374320][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.381725][T15560] netem: change failed [ 323.391927][T15561] veth1_to_hsr: entered promiscuous mode [ 323.482193][T15563] veth1_to_hsr: left promiscuous mode [ 324.005163][ T6237] hsr_slave_0: left promiscuous mode [ 324.017224][ T6237] hsr_slave_1: left promiscuous mode [ 324.023366][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.044250][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.055789][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.067313][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.067782][T15613] __nla_validate_parse: 198 callbacks suppressed [ 324.067797][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'. [ 324.128128][ T6237] veth1_macvtap: left promiscuous mode [ 324.133635][ T6237] veth0_macvtap: left promiscuous mode [ 324.139979][ T6237] veth1_vlan: left promiscuous mode [ 324.145354][ T6237] veth0_vlan: left promiscuous mode [ 324.172136][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'. [ 324.196639][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 324.648221][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 324.696339][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 324.845183][ T5841] Bluetooth: hci0: command tx timeout [ 325.203654][T15566] chnl_net:caif_netlink_parms(): no params data found [ 325.477554][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.484681][ T5841] Bluetooth: hci2: command tx timeout [ 325.490706][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.499169][T15566] bridge_slave_0: entered allmulticast mode [ 325.515526][T15566] bridge_slave_0: entered promiscuous mode [ 325.584166][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.592629][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.601468][T15566] bridge_slave_1: entered allmulticast mode [ 325.691513][T15566] bridge_slave_1: entered promiscuous mode [ 325.972768][T15577] chnl_net:caif_netlink_parms(): no params data found [ 326.210407][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.270593][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.687753][T15672] netlink: 'syz.4.2628': attribute type 9 has an invalid length. [ 326.701400][T15566] team0: Port device team_slave_0 added [ 326.721641][T15672] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.2628'. [ 326.749935][T15672] openvswitch: netlink: Message has 6 unknown bytes. [ 326.867531][T15566] team0: Port device team_slave_1 added [ 326.924372][ T5841] Bluetooth: hci0: command tx timeout [ 327.193749][ T6237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.283800][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.301967][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.328890][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.341611][T15577] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.349748][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.357183][T15577] bridge_slave_0: entered allmulticast mode [ 327.364489][T15577] bridge_slave_0: entered promiscuous mode [ 327.372697][T15577] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.384828][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.392096][T15577] bridge_slave_1: entered allmulticast mode [ 327.400282][T15577] bridge_slave_1: entered promiscuous mode [ 327.438120][ T6237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.462548][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.470165][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.498291][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.554569][ T5841] Bluetooth: hci2: command tx timeout [ 327.593357][ T6237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.653003][T15577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.698494][T15566] hsr_slave_0: entered promiscuous mode [ 327.715688][T15566] hsr_slave_1: entered promiscuous mode [ 327.721643][T15566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.729787][T15566] Cannot create hsr debugfs directory [ 327.739770][T15577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.802338][ T6237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.866007][T15577] team0: Port device team_slave_0 added [ 327.917157][T15577] team0: Port device team_slave_1 added [ 327.929712][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e658c00: rx timeout, send abort [ 327.938200][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031b97000: rx timeout, send abort [ 327.946855][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e658c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.961386][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031b97000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 328.071525][T15577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.080266][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.108964][T15577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.136710][T15577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.143770][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.170139][T15577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.335182][T15577] hsr_slave_0: entered promiscuous mode [ 328.354927][T15577] hsr_slave_1: entered promiscuous mode [ 328.364880][T15577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.392233][T15577] Cannot create hsr debugfs directory [ 328.413567][ T6237] bridge_slave_1: left allmulticast mode [ 328.422292][ T6237] bridge_slave_1: left promiscuous mode [ 328.435220][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.452241][ T6237] bridge_slave_0: left allmulticast mode [ 328.472763][ T6237] bridge_slave_0: left promiscuous mode [ 328.479034][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.632507][T15746] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2650'. [ 328.684502][T15747] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2650'. [ 328.812435][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2650'. [ 328.903687][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.919425][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.929573][ T6237] bond0 (unregistering): Released all slaves [ 328.973729][T15746] gretap0: entered promiscuous mode [ 328.991597][T15747] 0ªî{X¹¦: renamed from gretap0 [ 328.996724][ T5841] Bluetooth: hci0: command tx timeout [ 329.016708][T15747] 0ªî{X¹¦: left promiscuous mode [ 329.021796][T15747] 0ªî{X¹¦: entered allmulticast mode [ 329.045707][T15747] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 329.401756][T15761] netlink: 'syz.4.2655': attribute type 6 has an invalid length. [ 329.480859][ T6237] hsr_slave_0: left promiscuous mode [ 329.498313][ T6237] hsr_slave_1: left promiscuous mode [ 329.515290][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.534214][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.549519][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.559119][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.570611][T15770] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2658'. [ 329.588284][ T6237] veth1_macvtap: left promiscuous mode [ 329.593860][ T6237] veth0_macvtap: left promiscuous mode [ 329.599552][ T6237] veth1_vlan: left promiscuous mode [ 329.604994][ T6237] veth0_vlan: left promiscuous mode [ 329.644499][ T5841] Bluetooth: hci2: command tx timeout [ 329.727822][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 329.744264][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 330.079732][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 330.114140][T15778] netlink: 6172 bytes leftover after parsing attributes in process `syz.3.2660'. [ 330.123655][T15778] openvswitch: netlink: Flow key attr not present in new flow. [ 330.144172][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 330.571762][T15566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.716903][T15770] bond0 (unregistering): (slave team0): Releasing backup interface [ 330.731308][T15770] bond0 (unregistering): Released all slaves [ 330.742777][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2660'. [ 330.798219][T15566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.828530][T15566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.910728][T15566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.077580][ T5841] Bluetooth: hci0: command tx timeout [ 331.122095][T15801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2665'. [ 331.142796][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.169364][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.208621][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.215822][ T9837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.253108][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.260269][ T9837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.493548][T15577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.550615][T15577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.577146][T15577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.625471][T15577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.715530][ T5841] Bluetooth: hci2: command tx timeout [ 331.766142][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 331.904496][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.918137][T15577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.932366][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 332.013196][T15577] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.050016][T15841] x_tables: duplicate underflow at hook 2 [ 332.069582][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.076731][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.098146][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.105308][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.117777][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2679'. [ 332.151417][T15566] veth0_vlan: entered promiscuous mode [ 332.169072][T15846] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2678'. [ 332.193407][T15566] veth1_vlan: entered promiscuous mode [ 332.272303][T15566] veth0_macvtap: entered promiscuous mode [ 332.280634][T15850] set match dimension is over the limit! [ 332.305778][T15566] veth1_macvtap: entered promiscuous mode [ 332.334196][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.377840][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.401934][T15566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.411093][T15566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.419948][T15566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.432261][T15566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.646617][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.679751][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.719595][T15577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.769137][ T6237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.781868][ T6237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.827611][T15577] veth0_vlan: entered promiscuous mode [ 332.856202][T15577] veth1_vlan: entered promiscuous mode [ 332.922209][T15577] veth0_macvtap: entered promiscuous mode [ 332.968698][T15577] veth1_macvtap: entered promiscuous mode [ 333.065947][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.086568][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.100680][T15577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.123103][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.136638][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.152594][T15577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.177497][T15577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.190104][T15577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.202443][T15577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.218090][T15577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.300213][T15894] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 333.331225][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.343454][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.396798][ T9837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.416939][ T9837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.980338][ T2923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.576339][ T2923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.698829][T15939] __nla_validate_parse: 6 callbacks suppressed [ 334.698855][T15939] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2707'. [ 334.769865][T15941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 334.896151][ T2923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.968642][T15948] netlink: 'syz.4.2711': attribute type 11 has an invalid length. [ 335.051553][ T2923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.245525][ T2923] bridge_slave_1: left allmulticast mode [ 335.261746][ T2923] bridge_slave_1: left promiscuous mode [ 335.263102][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.275253][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.290973][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.303224][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.316980][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.317312][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.335235][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.337009][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.349660][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.354984][ T2923] bridge_slave_0: left allmulticast mode [ 335.363308][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.367307][ T2923] bridge_slave_0: left promiscuous mode [ 335.377957][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.389152][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.397861][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.398760][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.809568][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.823672][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.838822][ T2923] bond0 (unregistering): Released all slaves [ 336.028394][T15979] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 336.279725][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2718'. [ 336.495887][T15956] chnl_net:caif_netlink_parms(): no params data found [ 336.539326][ T2923] hsr_slave_0: left promiscuous mode [ 336.545935][ T2923] hsr_slave_1: left promiscuous mode [ 336.552117][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.560790][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.570099][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.578266][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.613159][ T2923] veth1_macvtap: left promiscuous mode [ 336.619746][ T2923] veth0_macvtap: left promiscuous mode [ 336.625809][ T2923] veth1_vlan: left promiscuous mode [ 336.631350][ T2923] veth0_vlan: left promiscuous mode [ 336.791324][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 337.082757][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 337.130199][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 337.477635][ T5837] Bluetooth: hci0: command tx timeout [ 337.483657][ T5837] Bluetooth: hci2: command tx timeout [ 337.812154][T16020] xt_time: unknown flags 0x4 [ 337.823068][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.839061][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.861362][T15956] bridge_slave_0: entered allmulticast mode [ 337.882037][T15956] bridge_slave_0: entered promiscuous mode [ 337.908174][T15959] chnl_net:caif_netlink_parms(): no params data found [ 337.930333][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.971869][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.981777][T15956] bridge_slave_1: entered allmulticast mode [ 337.990192][T15956] bridge_slave_1: entered promiscuous mode [ 338.097014][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.112297][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 338.176699][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.300166][T15956] team0: Port device team_slave_0 added [ 338.322446][T15956] team0: Port device team_slave_1 added [ 338.352219][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.371722][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.379226][T15959] bridge_slave_0: entered allmulticast mode [ 338.386731][T15959] bridge_slave_0: entered promiscuous mode [ 338.410685][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.418835][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.435607][T15959] bridge_slave_1: entered allmulticast mode [ 338.449676][T15959] bridge_slave_1: entered promiscuous mode [ 338.466739][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.496603][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.504384][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 338.591896][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.715850][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.723437][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.760932][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.817581][ T2923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.880580][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.969496][ T2923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.001398][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.049065][T16063] tipc: Enabling of bearer rejected, failed to enable media [ 339.155549][ T2923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.202370][T15959] team0: Port device team_slave_0 added [ 339.249817][ T2923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.272654][T16078] vlan3: entered promiscuous mode [ 339.278842][T16078] bond0: (slave vlan3): Opening slave failed [ 339.292327][T15959] team0: Port device team_slave_1 added [ 339.307480][T15956] hsr_slave_0: entered promiscuous mode [ 339.313958][T15956] hsr_slave_1: entered promiscuous mode [ 339.320772][T15956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.329244][T15956] Cannot create hsr debugfs directory [ 339.423608][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.449696][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.485160][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.510934][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.518930][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.564808][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.584833][ T5837] Bluetooth: hci0: command tx timeout [ 339.590281][ T54] Bluetooth: hci2: command tx timeout [ 339.614933][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 339.764732][T16094] batadv0 (unregistering): left allmulticast mode [ 339.900304][T15959] hsr_slave_0: entered promiscuous mode [ 339.928972][T15959] hsr_slave_1: entered promiscuous mode [ 339.941278][T15959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.959547][T15959] Cannot create hsr debugfs directory [ 340.070172][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'. [ 340.203633][ T2923] bridge_slave_1: left allmulticast mode [ 340.209595][ T2923] bridge_slave_1: left promiscuous mode [ 340.222533][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.243755][ T2923] bridge_slave_0: left allmulticast mode [ 340.264082][ T2923] bridge_slave_0: left promiscuous mode [ 340.280110][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.805130][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.817415][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.828049][ T2923] bond0 (unregistering): Released all slaves [ 340.876391][T16159] netlink: 'syz.1.2762': attribute type 29 has an invalid length. [ 341.243062][T16178] openvswitch: netlink: Multiple metadata blocks provided [ 341.256109][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 341.265812][ T2923] hsr_slave_0: left promiscuous mode [ 341.271597][ T2923] hsr_slave_1: left promiscuous mode [ 341.280270][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.289247][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.302051][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.309841][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.335029][ T2923] veth1_macvtap: left promiscuous mode [ 341.340534][ T2923] veth0_macvtap: left promiscuous mode [ 341.346216][ T2923] veth1_vlan: left promiscuous mode [ 341.351473][ T2923] veth0_vlan: left promiscuous mode [ 341.636086][ T5837] Bluetooth: hci2: command tx timeout [ 341.644287][ T5837] Bluetooth: hci0: command tx timeout [ 341.756224][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 341.800534][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 342.046349][T16187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.613301][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2778'. [ 342.735272][T16210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.756811][T16210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.803639][T16210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.880813][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 342.898343][T16227] tipc: Enabled bearer , priority 0 [ 343.196531][T16236] netlink: 'syz.1.2786': attribute type 2 has an invalid length. [ 343.236137][T15959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.259843][T15959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.293969][T16242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.299703][T15959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.327039][T15959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.361519][T16226] tipc: Disabling bearer [ 343.376825][T15956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.406089][T16245] openvswitch: netlink: Key 20 has unexpected len 16 expected 4 [ 343.413815][T15956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.430516][T15956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.453104][T15956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.698624][T15959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.716084][ T5837] Bluetooth: hci0: command tx timeout [ 343.716096][ T54] Bluetooth: hci2: command tx timeout [ 343.730866][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.766967][T15959] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.799299][T16262] netlink: 'syz.3.2793': attribute type 10 has an invalid length. [ 343.810987][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.829265][T16262] veth0_vlan: entered allmulticast mode [ 343.886379][T16262] veth0_vlan: left promiscuous mode [ 343.908202][T16262] veth0_vlan: entered promiscuous mode [ 343.918528][T16262] team0: Device veth0_vlan failed to register rx_handler [ 343.985368][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.992509][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.011846][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.019051][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.065377][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.072488][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.117884][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.125070][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.170016][T16274] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 344.458429][T16286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2801'. [ 344.468533][T16286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2801'. [ 344.482651][T16286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2801'. [ 344.579151][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.672846][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.688065][T15959] veth0_vlan: entered promiscuous mode [ 344.709211][T15959] veth1_vlan: entered promiscuous mode [ 344.783683][T15959] veth0_macvtap: entered promiscuous mode [ 344.824308][T15959] veth1_macvtap: entered promiscuous mode [ 344.850037][T15956] veth0_vlan: entered promiscuous mode [ 344.889201][T15956] veth1_vlan: entered promiscuous mode [ 344.915276][T15959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.963701][T15959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.001333][T15959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.020483][T16289] netlink: 'syz.3.2802': attribute type 1 has an invalid length. [ 345.029805][T15959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.039391][T15959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.048252][T15959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.092439][T16289] 8021q: adding VLAN 0 to HW filter on device bond13 [ 345.110829][T16300] gretap1: entered promiscuous mode [ 345.119617][T16300] bond13: (slave gretap1): making interface the new active one [ 345.133263][T16300] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 345.158279][T16289] bond13: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 345.301968][T15956] veth0_macvtap: entered promiscuous mode [ 345.359613][T15956] veth1_macvtap: entered promiscuous mode [ 345.367388][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.378584][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.427731][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.436850][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.452296][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.459981][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.476533][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.497396][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.516575][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.535403][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.563231][T15956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.575987][T15956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.586486][T15956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.596727][T15956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.787180][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.804877][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.839782][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.848427][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.300797][ T6232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.339144][T16343] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 346.605542][ T6232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.947027][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.956164][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.967328][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.976728][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.987213][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.999413][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.030236][ T6232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.132426][T16350] chnl_net:caif_netlink_parms(): no params data found [ 347.182596][T16350] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.195453][T16350] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.202750][T16350] bridge_slave_0: entered allmulticast mode [ 347.209760][T16350] bridge_slave_0: entered promiscuous mode [ 347.229935][ T6232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.246808][T16350] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.253947][T16350] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.261395][T16350] bridge_slave_1: entered allmulticast mode [ 347.269603][T16350] bridge_slave_1: entered promiscuous mode [ 347.297880][T16350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.311385][T16350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.347737][T16350] team0: Port device team_slave_0 added [ 347.362404][T16350] team0: Port device team_slave_1 added [ 347.397606][T16350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.404892][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.433322][T16350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.450228][T16350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.457976][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.485948][T16350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.497639][ T6232] bridge_slave_1: left allmulticast mode [ 347.503296][ T6232] bridge_slave_1: left promiscuous mode [ 347.510171][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.520134][ T6232] bridge_slave_0: left allmulticast mode [ 347.527208][ T6232] bridge_slave_0: left promiscuous mode [ 347.532877][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.891218][T16364] x_tables: unsorted entry at hook 3 [ 348.066245][ T6232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.089475][ T6232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.110585][ T6232] bond0 (unregistering): Released all slaves [ 348.315663][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.325839][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.340291][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.350735][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.359864][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.362320][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2825'. [ 348.379395][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.477590][T16350] hsr_slave_0: entered promiscuous mode [ 348.497470][T16350] hsr_slave_1: entered promiscuous mode [ 348.512266][T16350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.525862][T16350] Cannot create hsr debugfs directory [ 348.768638][ T6232] hsr_slave_0: left promiscuous mode [ 348.792653][ T6232] hsr_slave_1: left promiscuous mode [ 348.799378][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.814202][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.830667][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.854170][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.899114][ T6232] veth1_macvtap: left promiscuous mode [ 348.909794][ T6232] veth0_macvtap: left promiscuous mode [ 348.915952][ T6232] veth1_vlan: left promiscuous mode [ 348.921306][ T6232] veth0_vlan: left promiscuous mode [ 349.080873][ T5837] Bluetooth: hci0: command tx timeout [ 349.491126][ T6232] team0 (unregistering): Port device team_slave_1 removed [ 349.536129][ T6232] team0 (unregistering): Port device team_slave_0 removed [ 349.981862][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 349.995625][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2831'. [ 350.284314][T16422] ax25_connect(): syz.1.2836 uses autobind, please contact jreuter@yaina.de [ 350.435120][ T5837] Bluetooth: hci2: command tx timeout [ 350.717538][T16377] chnl_net:caif_netlink_parms(): no params data found [ 350.883264][T16459] netlink: 'syz.4.2841': attribute type 10 has an invalid length. [ 350.932244][ T6232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.972309][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 351.000013][T16465] vxcan1: tx address claim with dlc 0 [ 351.017714][T16459] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 351.056896][T16463] batman_adv: batadv0: Interface deactivated: dummy0 [ 351.084305][T16463] batman_adv: batadv0: Removing interface: dummy0 [ 351.105682][T16463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.149742][T16463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.164428][ T5837] Bluetooth: hci0: command tx timeout [ 351.247179][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 351.284697][ T6232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.440960][T16479] openvswitch: netlink: IP tunnel dst address not specified [ 351.490637][ T6232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.529084][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.536905][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.554758][T16377] bridge_slave_0: entered allmulticast mode [ 351.565948][T16377] bridge_slave_0: entered promiscuous mode [ 351.656551][ T6232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.690139][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.702182][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.734600][T16377] bridge_slave_1: entered allmulticast mode [ 351.741620][T16377] bridge_slave_1: entered promiscuous mode [ 351.832059][T16350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.840480][T16490] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2849'. [ 351.879397][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.924312][T16350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.943353][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.045362][T16350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.076234][T16350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.091949][T16377] team0: Port device team_slave_0 added [ 352.139245][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2855'. [ 352.151558][T16377] team0: Port device team_slave_1 added [ 352.199148][ T6232] bridge_slave_1: left allmulticast mode [ 352.222702][ T6232] bridge_slave_1: left promiscuous mode [ 352.233126][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.251658][ T6232] bridge_slave_0: left allmulticast mode [ 352.262366][ T6232] bridge_slave_0: left promiscuous mode [ 352.268899][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.514340][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 352.679073][ T6232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.690632][ T6232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.701482][ T6232] bond0 (unregistering): Released all slaves [ 352.721455][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.729214][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.755821][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.872210][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.894208][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.937287][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.136556][T16377] hsr_slave_0: entered promiscuous mode [ 353.144355][T16377] hsr_slave_1: entered promiscuous mode [ 353.156855][T16377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.184100][T16377] Cannot create hsr debugfs directory [ 353.242406][ T54] Bluetooth: hci0: command tx timeout [ 353.371108][ T6232] hsr_slave_0: left promiscuous mode [ 353.383764][ T6232] hsr_slave_1: left promiscuous mode [ 353.398446][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.409515][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.419374][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.428714][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.472796][ T6232] veth1_macvtap: left promiscuous mode [ 353.481453][ T6232] veth0_macvtap: left promiscuous mode [ 353.489449][ T6232] veth1_vlan: left promiscuous mode [ 353.496700][ T6232] veth0_vlan: left promiscuous mode [ 353.882547][T16568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2868'. [ 353.894235][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2868'. [ 354.040489][ T6232] team0 (unregistering): Port device team_slave_1 removed [ 354.086310][ T6232] team0 (unregistering): Port device team_slave_0 removed [ 354.496959][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 354.523009][T16563] bond0: entered promiscuous mode [ 354.533064][T16563] bond0: entered allmulticast mode [ 354.539230][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 354.539394][T16563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.569143][T16552] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2863'. [ 354.594512][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 354.671123][T16350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.790824][T16350] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.853076][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.860238][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.916181][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.923318][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.000227][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2873'. [ 355.013201][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2873'. [ 355.039421][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2873'. [ 355.057301][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2873'. [ 355.181919][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.212204][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 355.268723][T16377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.280062][T16377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.291729][T16377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.314128][ T54] Bluetooth: hci0: command tx timeout [ 355.328076][T16377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.353975][T16350] veth0_vlan: entered promiscuous mode [ 355.375988][T16350] veth1_vlan: entered promiscuous mode [ 355.439789][T16350] veth0_macvtap: entered promiscuous mode [ 355.457382][T16350] veth1_macvtap: entered promiscuous mode [ 355.490080][T16350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.512777][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.531962][T16350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.556868][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.571279][T16350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.580670][T16350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.590247][T16350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.599337][T16350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.612750][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.619947][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.639980][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.647155][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.800553][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.840859][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.888598][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.920074][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.200170][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.284995][T16377] veth0_vlan: entered promiscuous mode [ 356.312368][T16377] veth1_vlan: entered promiscuous mode [ 356.439477][ T2923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.510139][T16377] veth0_macvtap: entered promiscuous mode [ 356.531970][T16377] veth1_macvtap: entered promiscuous mode [ 356.597251][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.622620][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.646317][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.684919][ T54] Bluetooth: hci2: command 0x041b tx timeout [ 356.696384][ T2923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.719882][T16377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.730828][T16377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.742275][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.753223][T16377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.764470][T16377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.773197][T16377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.782727][T16377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.862093][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.870096][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.898966][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.907085][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.026205][ T2923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.246079][T16653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.661840][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.671866][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.695600][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.700743][ T2923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.728136][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.736116][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.743668][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.077405][T16697] x_tables: duplicate underflow at hook 3 [ 358.109787][T16675] chnl_net:caif_netlink_parms(): no params data found [ 358.218138][T16702] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.330359][T16712] bridge0: port 3(team0) entered disabled state [ 358.336870][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.344063][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.442246][T16712] vlan0: left allmulticast mode [ 358.447484][T16712] vlan0: left promiscuous mode [ 358.531339][T16712] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.541372][T16712] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.550602][T16712] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.560559][T16712] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.611789][T16712] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.621436][T16712] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.630531][T16712] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.639958][T16712] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.734872][ T2923] bridge_slave_1: left allmulticast mode [ 358.741373][ T2923] bridge_slave_1: left promiscuous mode [ 358.748082][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.773273][ T2923] bridge_slave_0: left allmulticast mode [ 358.779208][ T2923] bridge_slave_0: left promiscuous mode [ 358.784969][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.138561][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.150848][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.160812][ T2923] bond0 (unregistering): Released all slaves [ 359.171723][T16675] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.179168][T16675] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.186991][T16675] bridge_slave_0: entered allmulticast mode [ 359.193609][T16675] bridge_slave_0: entered promiscuous mode [ 359.203156][T16675] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.223893][T16675] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.238968][T16675] bridge_slave_1: entered allmulticast mode [ 359.252642][T16675] bridge_slave_1: entered promiscuous mode [ 359.301867][T16675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.314683][T16675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.369699][T16675] team0: Port device team_slave_0 added [ 359.379039][T16675] team0: Port device team_slave_1 added [ 359.416790][ T2923] hsr_slave_0: left promiscuous mode [ 359.422556][ T2923] hsr_slave_1: left promiscuous mode [ 359.428707][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.436369][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.445632][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.453054][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.476705][ T2923] veth1_macvtap: left promiscuous mode [ 359.482258][ T2923] veth0_macvtap: left promiscuous mode [ 359.488351][ T2923] veth1_vlan: left promiscuous mode [ 359.493656][ T2923] veth0_vlan: left promiscuous mode [ 359.807458][ T5837] Bluetooth: hci0: command tx timeout [ 360.209844][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 360.213331][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.229061][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.237394][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.251222][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.271049][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 360.284649][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.292673][T16742] openvswitch: netlink: Duplicate or invalid key (type 0). [ 360.301416][T16742] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.322819][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 360.759033][T16675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.766980][T16675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.793570][T16675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.836716][T16675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.843693][T16675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.889722][T16675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.032363][T16675] hsr_slave_0: entered promiscuous mode [ 361.049669][T16675] hsr_slave_1: entered promiscuous mode [ 361.056513][T16675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.068288][T16675] Cannot create hsr debugfs directory [ 361.173774][T16756] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 361.190019][T16759] __nla_validate_parse: 9 callbacks suppressed [ 361.190037][T16759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2917'. [ 361.483697][ T2923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.595982][ T2923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.613615][T16738] chnl_net:caif_netlink_parms(): no params data found [ 361.671999][ T2923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.703760][T16784] netlink: 'syz.4.2925': attribute type 5 has an invalid length. [ 361.714851][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.722079][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.729660][T16738] bridge_slave_0: entered allmulticast mode [ 361.739014][T16738] bridge_slave_0: entered promiscuous mode [ 361.747119][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.754374][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.761613][T16738] bridge_slave_1: entered allmulticast mode [ 361.769190][T16738] bridge_slave_1: entered promiscuous mode [ 361.792979][ T2923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.828987][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.846011][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.884606][ T5837] Bluetooth: hci0: command tx timeout [ 361.915758][T16738] team0: Port device team_slave_0 added [ 361.959968][T16738] team0: Port device team_slave_1 added [ 362.000016][T16791] netlink: 'syz.3.2926': attribute type 10 has an invalid length. [ 362.030132][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.037503][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.068662][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.109223][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.117470][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.150443][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.179034][T16675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.202002][T16675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.243614][T16675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.261177][ T2923] bridge_slave_1: left allmulticast mode [ 362.267706][ T2923] bridge_slave_1: left promiscuous mode [ 362.273421][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.282283][ T2923] bridge_slave_0: left allmulticast mode [ 362.288586][ T2923] bridge_slave_0: left promiscuous mode [ 362.294647][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.355098][ T5837] Bluetooth: hci2: command tx timeout [ 362.440537][T16796] xt_limit: Overflow, try lower: 2147483649/128 [ 362.541645][T16805] netlink: 'syz.4.2930': attribute type 11 has an invalid length. [ 362.839479][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.851240][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.861327][ T2923] bond0 (unregistering): Released all slaves [ 362.872963][T16738] hsr_slave_0: entered promiscuous mode [ 362.880607][T16738] hsr_slave_1: entered promiscuous mode [ 362.887445][T16738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.895855][T16738] Cannot create hsr debugfs directory [ 362.901405][T16675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.124612][T16826] netlink: 'syz.1.2936': attribute type 8 has an invalid length. [ 363.170842][T16822] geneve2: entered promiscuous mode [ 363.177787][T16822] geneve2: entered allmulticast mode [ 363.207385][T16828] delete_channel: no stack [ 363.289267][T16832] netlink: 'syz.4.2937': attribute type 51 has an invalid length. [ 363.351188][ T2923] hsr_slave_0: left promiscuous mode [ 363.365302][ T2923] hsr_slave_1: left promiscuous mode [ 363.371262][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.381976][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.389652][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.400527][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.425188][ T2923] veth1_macvtap: left promiscuous mode [ 363.430714][ T2923] veth0_macvtap: left promiscuous mode [ 363.437804][ T2923] veth1_vlan: left promiscuous mode [ 363.443097][ T2923] veth0_vlan: left promiscuous mode [ 363.896339][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 363.938827][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 363.964530][ T5837] Bluetooth: hci0: command tx timeout [ 364.434564][ T5837] Bluetooth: hci2: command tx timeout [ 364.538943][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 364.629358][T16849] vxcan1 (unregistering): left allmulticast mode [ 364.710016][T16675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.807918][T16675] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.842087][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.849263][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.887957][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.895111][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.931425][T16864] netlink: ct family unspecified [ 364.957657][T16864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.009348][T16868] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.2948'. [ 365.129566][T16738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.168225][T16738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.197296][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 365.197604][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 365.239471][T16738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.269221][T16738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.308012][T16675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.392370][T16891] openvswitch: netlink: Multiple metadata blocks provided [ 365.414715][T16675] veth0_vlan: entered promiscuous mode [ 365.443035][T16675] veth1_vlan: entered promiscuous mode [ 365.498622][T16675] veth0_macvtap: entered promiscuous mode [ 365.511756][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.522736][T16675] veth1_macvtap: entered promiscuous mode [ 365.547801][T16675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.561045][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.576647][T16675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.594752][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.601850][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.623722][T16675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.636132][T16675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.645825][T16675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.664102][T16675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.685024][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.692213][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.703520][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 365.749564][T16902] netlink: 'syz.3.2957': attribute type 4 has an invalid length. [ 365.877124][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.890620][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.947865][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.972222][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.031863][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.045074][ T5837] Bluetooth: hci0: command tx timeout [ 366.166113][T16738] veth0_vlan: entered promiscuous mode [ 366.176258][T16738] veth1_vlan: entered promiscuous mode [ 366.240926][T16738] veth0_macvtap: entered promiscuous mode [ 366.259879][T16738] veth1_macvtap: entered promiscuous mode [ 366.267629][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 366.309119][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.341505][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.366389][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.497764][ T6226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.524754][ T5837] Bluetooth: hci2: command tx timeout [ 366.535349][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.574222][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.592676][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.628687][ T6226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.648509][T16738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.657481][T16738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.666441][T16738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.675509][T16738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.715078][ T6226] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.775631][ T9837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.783484][ T9837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.809298][ T9837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.817685][ T9837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.932147][ T6226] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.320990][T16935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'. [ 367.708958][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 367.721780][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.735569][T16954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2972'. [ 367.745946][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.759224][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.768636][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.817416][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.827826][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.871663][T16961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2974'. [ 367.931539][ T6226] bridge_slave_1: left allmulticast mode [ 367.941701][ T6226] bridge_slave_1: left promiscuous mode [ 367.948036][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.958698][ T6226] bridge_slave_0: left allmulticast mode [ 367.965245][ T6226] bridge_slave_0: left promiscuous mode [ 367.971054][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.052779][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 368.168264][T16978] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 368.194514][T16978] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 368.214775][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 368.437811][ T6226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.451463][ T6226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.462375][ T6226] bond0 (unregistering): Released all slaves [ 368.697249][T16949] chnl_net:caif_netlink_parms(): no params data found [ 368.753157][ T6226] hsr_slave_0: left promiscuous mode [ 368.761938][ T6226] hsr_slave_1: left promiscuous mode [ 368.767679][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.775338][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.782973][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.790876][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.814873][ T6226] veth1_macvtap: left promiscuous mode [ 368.820371][ T6226] veth0_macvtap: left promiscuous mode [ 368.825962][ T6226] veth1_vlan: left promiscuous mode [ 368.831192][ T6226] veth0_vlan: left promiscuous mode [ 369.212373][ T6226] team0 (unregistering): Port device team_slave_1 removed [ 369.259766][ T6226] team0 (unregistering): Port device team_slave_0 removed [ 369.670726][T16993] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 369.768079][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.775501][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.782836][T16949] bridge_slave_0: entered allmulticast mode [ 369.792676][T16949] bridge_slave_0: entered promiscuous mode [ 369.854882][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.875343][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.882581][T16949] bridge_slave_1: entered allmulticast mode [ 369.894130][ T54] Bluetooth: hci0: command tx timeout [ 369.902120][T16949] bridge_slave_1: entered promiscuous mode [ 369.990027][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.006803][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.016525][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.035280][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.044891][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.055168][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.062690][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.073829][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.166778][T16949] team0: Port device team_slave_0 added [ 370.188276][T16949] team0: Port device team_slave_1 added [ 370.276656][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.283633][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.358330][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.464610][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.471604][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.507106][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.615183][T17032] netlink: 'syz.3.2990': attribute type 9 has an invalid length. [ 370.623024][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 370.683368][T16949] hsr_slave_0: entered promiscuous mode [ 370.705175][T16949] hsr_slave_1: entered promiscuous mode [ 370.726808][T16949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.744151][T16949] Cannot create hsr debugfs directory [ 370.877612][ T6226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.118238][ T6226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.230273][T17005] chnl_net:caif_netlink_parms(): no params data found [ 371.287584][ T6226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.418969][ T6226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.558943][T17005] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.566978][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.575414][T17005] bridge_slave_0: entered allmulticast mode [ 371.582487][T17005] bridge_slave_0: entered promiscuous mode [ 371.614916][T17005] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.622016][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.639113][T17005] bridge_slave_1: entered allmulticast mode [ 371.646492][T17005] bridge_slave_1: entered promiscuous mode [ 371.750648][T17005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.760460][ T6226] bridge_slave_1: left allmulticast mode [ 371.767231][ T6226] bridge_slave_1: left promiscuous mode [ 371.772961][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.796884][ T6226] bridge_slave_0: left allmulticast mode [ 371.802560][ T6226] bridge_slave_0: left promiscuous mode [ 371.809690][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.958221][ T5837] Bluetooth: hci0: command tx timeout [ 372.114538][ T5837] Bluetooth: hci2: command tx timeout [ 372.223674][ T6226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.234950][ T6226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.250634][ T6226] bond0 (unregistering): Released all slaves [ 372.262322][T17005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.401426][T17005] team0: Port device team_slave_0 added [ 372.413209][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 372.482426][T17106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3009'. [ 372.504296][T17106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3009'. [ 372.530091][T17005] team0: Port device team_slave_1 added [ 372.659856][T17119] netlink: 'syz.1.3013': attribute type 2 has an invalid length. [ 372.681299][T17119] netlink: 'syz.1.3013': attribute type 8 has an invalid length. [ 372.694854][T17119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3013'. [ 372.714673][T17005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.734058][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.765480][T17005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.776785][T17130] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 372.790598][T17131] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 372.851457][T17005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.874287][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.912540][T17005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.921507][T17137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'. [ 372.933750][T17137] netlink: 'syz.3.3019': attribute type 7 has an invalid length. [ 372.947245][T17137] netlink: 'syz.3.3019': attribute type 8 has an invalid length. [ 372.956904][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 373.067698][T17005] hsr_slave_0: entered promiscuous mode [ 373.077332][T17005] hsr_slave_1: entered promiscuous mode [ 373.083446][T17005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.086740][T17147] SET target dimension over the limit! [ 373.094857][T17005] Cannot create hsr debugfs directory [ 373.131085][ T6226] hsr_slave_0: left promiscuous mode [ 373.137908][ T6226] hsr_slave_1: left promiscuous mode [ 373.143611][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.151128][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.159091][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.166862][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.179714][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3022'. [ 373.197895][ T6226] veth1_macvtap: left promiscuous mode [ 373.203406][ T6226] veth0_macvtap: left promiscuous mode [ 373.209077][ T6226] veth1_vlan: left promiscuous mode [ 373.214441][ T6226] veth0_vlan: left promiscuous mode [ 373.633441][ T6226] team0 (unregistering): Port device team_slave_1 removed [ 373.677295][ T6226] team0 (unregistering): Port device team_slave_0 removed [ 374.044417][ T5837] Bluetooth: hci0: command tx timeout [ 374.118031][T17149] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3022'. [ 374.151832][T17157] dvmrp0: left allmulticast mode [ 374.193029][T16949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.200200][ T5837] Bluetooth: hci2: command tx timeout [ 374.332525][T16949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.363296][T16949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.393353][T16949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.422496][T17169] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 374.432836][T17169] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3025'. [ 374.852717][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.893217][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.935900][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.943057][ T9837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.958076][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.965240][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.117406][T17200] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 375.163833][T17005] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.183554][T17005] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.210399][T17200] 8021q: adding VLAN 0 to HW filter on device bond15 [ 375.256935][T17203] bond15: (slave gretap2): making interface the new active one [ 375.276491][T17203] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 375.289761][T17005] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.335494][T17005] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.493871][T17223] netlink: 'syz.1.3040': attribute type 8 has an invalid length. [ 375.548215][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.569231][T17005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.597717][T17005] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.618283][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.625495][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.649916][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.657092][ T9837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.688599][T16949] veth0_vlan: entered promiscuous mode [ 375.725085][T16949] veth1_vlan: entered promiscuous mode [ 375.813960][T16949] veth0_macvtap: entered promiscuous mode [ 375.833194][T16949] veth1_macvtap: entered promiscuous mode [ 375.875586][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.901068][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.931843][T16949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.951411][T16949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.971993][T16949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.994038][T16949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.100647][T17005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.116865][ T5837] Bluetooth: hci0: command tx timeout [ 376.135808][ T6232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.153076][ T6232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.199584][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.230255][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.285492][ T5837] Bluetooth: hci2: command tx timeout [ 376.305664][T17005] veth0_vlan: entered promiscuous mode [ 376.376688][T17005] veth1_vlan: entered promiscuous mode [ 376.463612][T17005] veth0_macvtap: entered promiscuous mode [ 376.486878][T17005] veth1_macvtap: entered promiscuous mode [ 376.596034][T17005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.637414][T17005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.679315][T17005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.699089][T17005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.709778][T17005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.722161][T17005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.731119][T17261] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3052'. [ 376.753254][T17005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.784361][T17005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.793096][T17005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.803565][T17005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.937726][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.946145][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.966375][T17273] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 377.001099][ T6219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.010059][ T6219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.484612][T17287] __nla_validate_parse: 3 callbacks suppressed [ 377.484631][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 377.500308][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 377.524647][T17287] netlink: 'syz.3.3061': attribute type 7 has an invalid length. [ 377.618713][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 378.655874][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 378.788007][ T6237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.961353][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.970736][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.985197][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.999699][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.008674][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 379.021192][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.160197][ T6237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.175697][T17304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.337529][ T6237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.439238][ T6237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.589948][ T6237] bridge_slave_1: left allmulticast mode [ 379.596429][ T6237] bridge_slave_1: left promiscuous mode [ 379.602189][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.611328][ T6237] bridge_slave_0: left allmulticast mode [ 379.617352][ T6237] bridge_slave_0: left promiscuous mode [ 379.623015][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.953498][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.964631][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.979657][ T6237] bond0 (unregistering): Released all slaves [ 380.062891][T17299] chnl_net:caif_netlink_parms(): no params data found [ 380.208758][T17299] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.216050][T17299] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.223276][T17299] bridge_slave_0: entered allmulticast mode [ 380.230691][T17299] bridge_slave_0: entered promiscuous mode [ 380.240464][ T6237] hsr_slave_0: left promiscuous mode [ 380.249418][ T6237] hsr_slave_1: left promiscuous mode [ 380.255252][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.262638][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.270926][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.279322][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.302866][ T6237] veth1_macvtap: left promiscuous mode [ 380.308742][ T6237] veth0_macvtap: left promiscuous mode [ 380.314472][ T6237] veth1_vlan: left promiscuous mode [ 380.319703][ T6237] veth0_vlan: left promiscuous mode [ 380.710578][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 380.753207][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 380.954222][T17330] Bluetooth: MGMT ver 1.23 [ 381.080780][ T5837] Bluetooth: hci0: command tx timeout [ 381.229970][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.247894][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.260885][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.272202][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.280634][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 381.290526][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.449714][T17299] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.457277][T17299] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.464669][T17299] bridge_slave_1: entered allmulticast mode [ 381.471815][T17299] bridge_slave_1: entered promiscuous mode [ 381.646183][T17299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.667241][T17299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.793535][T17357] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3082'. [ 381.845641][T17299] team0: Port device team_slave_0 added [ 381.880213][T17299] team0: Port device team_slave_1 added [ 381.992076][T17299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.009632][T17299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.047646][T17299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.060394][T17299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.067794][T17299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.094692][T17299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.232793][T17299] hsr_slave_0: entered promiscuous mode [ 382.242907][T17299] hsr_slave_1: entered promiscuous mode [ 382.260264][T17299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.287505][T17299] Cannot create hsr debugfs directory [ 382.460362][T17394] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3091'. [ 382.498780][ T6237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.540682][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 382.643391][ T6237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.817000][ T6237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.939520][ T6237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.972134][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'. [ 383.008620][T17340] chnl_net:caif_netlink_parms(): no params data found [ 383.009132][T17424] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3098'. [ 383.164152][ T54] Bluetooth: hci0: command tx timeout [ 383.259706][T17340] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.268488][T17340] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.276106][T17340] bridge_slave_0: entered allmulticast mode [ 383.283062][T17340] bridge_slave_0: entered promiscuous mode [ 383.312185][T17340] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.320553][T17340] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.327839][T17340] bridge_slave_1: entered allmulticast mode [ 383.335276][T17340] bridge_slave_1: entered promiscuous mode [ 383.342116][ T6237] bridge_slave_1: left allmulticast mode [ 383.350669][ T6237] bridge_slave_1: left promiscuous mode [ 383.365819][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.386827][ T6237] bridge_slave_0: left allmulticast mode [ 383.392507][ T6237] bridge_slave_0: left promiscuous mode [ 383.400354][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.412429][ T54] Bluetooth: hci2: command tx timeout [ 383.746399][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.757352][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.767697][ T6237] bond0 (unregistering): Released all slaves [ 383.812809][T17340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.825609][T17340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.925563][T17340] team0: Port device team_slave_0 added [ 384.072268][T17340] team0: Port device team_slave_1 added [ 384.202454][T17340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.210152][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.288746][T17340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.361141][T17468] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 384.422761][T17340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.441868][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.487775][T17340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.549473][ T6237] hsr_slave_0: left promiscuous mode [ 384.577502][ T6237] hsr_slave_1: left promiscuous mode [ 384.583460][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.599689][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.634965][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.642595][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.682367][ T6237] veth1_macvtap: left promiscuous mode [ 384.688388][ T6237] veth0_macvtap: left promiscuous mode [ 384.694255][ T6237] veth1_vlan: left promiscuous mode [ 384.699746][ T6237] veth0_vlan: left promiscuous mode [ 385.200827][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 385.234257][ T54] Bluetooth: hci0: command tx timeout [ 385.252511][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 385.474892][ T54] Bluetooth: hci2: command tx timeout [ 385.672981][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 385.684217][T17299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.703073][T17299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.767153][T17299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.780441][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3115'. [ 385.810861][T17484] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3115'. [ 385.862850][T17487] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3116'. [ 385.880963][T17299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.900920][T17486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3116'. [ 385.914239][T17486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3116'. [ 385.945278][T17340] hsr_slave_0: entered promiscuous mode [ 385.951527][T17340] hsr_slave_1: entered promiscuous mode [ 385.957826][T17340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.966967][T17340] Cannot create hsr debugfs directory [ 386.219622][T17506] netlink: 'syz.4.3118': attribute type 32 has an invalid length. [ 386.247482][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 386.281813][T17506] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 386.398241][T17299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.496280][T17299] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.554920][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.562016][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.592825][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.600036][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.674887][T17529] C: renamed from lo [ 386.701759][T17529] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 386.884788][T17340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.900439][T17340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.927771][T17340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.952145][T17340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.173103][T17340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.232311][T17340] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.267677][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.274816][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.314235][ T54] Bluetooth: hci0: command tx timeout [ 387.339867][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.347060][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.367649][T17299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.495445][T17299] veth0_vlan: entered promiscuous mode [ 387.519901][T17299] veth1_vlan: entered promiscuous mode [ 387.554787][ T54] Bluetooth: hci2: command tx timeout [ 387.630372][T17299] veth0_macvtap: entered promiscuous mode [ 387.644993][T17299] veth1_macvtap: entered promiscuous mode [ 387.657859][T17577] __nla_validate_parse: 7 callbacks suppressed [ 387.657876][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 387.712059][T17299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.737345][T17299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.753723][T17299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.770631][T17299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.781788][T17299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.796247][T17299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.802132][T17581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3143'. [ 387.851535][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'. [ 387.868696][T17340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.911666][T17583] bridge0: port 1(batadv1) entered blocking state [ 387.920752][T17583] bridge0: port 1(batadv1) entered disabled state [ 387.930863][T17583] batadv1: entered allmulticast mode [ 387.938450][T17583] batadv1: entered promiscuous mode [ 388.026458][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.040326][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.092446][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.110971][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.123318][T17340] veth0_vlan: entered promiscuous mode [ 388.157288][T17340] veth1_vlan: entered promiscuous mode [ 388.242755][T17340] veth0_macvtap: entered promiscuous mode [ 388.281504][T17340] veth1_macvtap: entered promiscuous mode [ 388.407939][ T6219] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 388.417712][ T6219] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 388.475457][T17611] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3150'. [ 388.479230][T17340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.514269][T17340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.572171][T17340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.598982][T17340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.625569][T17340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.643283][T17340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.656610][T17340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.665519][T17340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.683522][T17340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.693143][T17340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.870966][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.907703][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.968238][ T6237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.977905][ T6237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.366126][ T6219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.754297][ T6219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.102776][ T6219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.177599][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.188112][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.199400][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.219256][ T6219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.219608][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.239392][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 390.247842][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.339031][ T6219] bridge_slave_1: left allmulticast mode [ 390.344895][ T6219] bridge_slave_1: left promiscuous mode [ 390.350550][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.360247][ T6219] bridge_slave_0: left allmulticast mode [ 390.366187][ T6219] bridge_slave_0: left promiscuous mode [ 390.371813][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.722035][ T6219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.732620][ T6219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.742660][ T6219] bond0 (unregistering): Released all slaves [ 390.861483][T17641] chnl_net:caif_netlink_parms(): no params data found [ 390.941229][T17641] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.948450][T17641] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.956758][T17641] bridge_slave_0: entered allmulticast mode [ 390.963784][T17641] bridge_slave_0: entered promiscuous mode [ 390.971329][T17641] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.978550][T17641] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.986168][T17641] bridge_slave_1: entered allmulticast mode [ 390.992742][T17641] bridge_slave_1: entered promiscuous mode [ 391.032818][ T6219] hsr_slave_0: left promiscuous mode [ 391.039257][ T6219] hsr_slave_1: left promiscuous mode [ 391.048050][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.055598][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.063224][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.072241][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.096914][ T6219] veth1_macvtap: left promiscuous mode [ 391.102419][ T6219] veth0_macvtap: left promiscuous mode [ 391.108197][ T6219] veth1_vlan: left promiscuous mode [ 391.113439][ T6219] veth0_vlan: left promiscuous mode [ 391.560785][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 391.581095][T17656] x_tables: duplicate underflow at hook 2 [ 391.688309][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 391.767248][ T6219] team0 (unregistering): Port device team_slave_0 removed [ 391.810067][T17663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 391.894578][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.907078][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.919352][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.929944][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.937704][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 391.945498][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.274575][ T54] Bluetooth: hci0: command tx timeout [ 392.284747][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.298794][T17663] gre0: entered allmulticast mode [ 392.365920][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.478588][T17641] team0: Port device team_slave_0 added [ 392.543239][T17672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3162'. [ 392.554445][T17641] team0: Port device team_slave_1 added [ 392.562435][T17670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.722275][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.730059][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.770564][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.809224][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.819593][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.847651][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.860058][T17687] wlan0 speed is unknown, defaulting to 1000 [ 392.877390][T17687] wlan0 speed is unknown, defaulting to 1000 [ 392.890310][T17687] wlan0 speed is unknown, defaulting to 1000 [ 392.929815][T17687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 392.972399][T17641] hsr_slave_0: entered promiscuous mode [ 392.983719][T17641] hsr_slave_1: entered promiscuous mode [ 392.990114][T17641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.998202][T17641] Cannot create hsr debugfs directory [ 393.007193][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.049988][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.069528][T17695] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 393.122688][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.137341][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.166600][T17698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3170'. [ 393.221644][ T6219] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.242252][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.285902][T17687] wlan0 speed is unknown, defaulting to 1000 [ 393.315603][ T6219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.337070][T17665] chnl_net:caif_netlink_parms(): no params data found [ 393.398819][ T6219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.488374][ T6219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.656713][T17718] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 393.701103][T17665] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.724840][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.732129][T17665] bridge_slave_0: entered allmulticast mode [ 393.765341][T17665] bridge_slave_0: entered promiscuous mode [ 393.804526][T17665] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.816459][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.824270][T17665] bridge_slave_1: entered allmulticast mode [ 393.835354][T17665] bridge_slave_1: entered promiscuous mode [ 393.868855][T17723] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3175'. [ 393.890656][T17721] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 393.910521][T17665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.931932][T17722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.945545][T17665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.969752][ T6219] bridge_slave_1: left allmulticast mode [ 393.977999][ T6219] bridge_slave_1: left promiscuous mode [ 393.991006][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.034479][ T54] Bluetooth: hci2: command tx timeout [ 394.046960][ T6219] bridge_slave_0: left allmulticast mode [ 394.052718][ T6219] bridge_slave_0: left promiscuous mode [ 394.060059][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.111081][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 394.243082][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3181'. [ 394.310290][T17742] netlink: 'syz.3.3181': attribute type 21 has an invalid length. [ 394.354787][ T54] Bluetooth: hci0: command tx timeout [ 394.609976][ T6219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.621088][ T6219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.631606][ T6219] bond0 (unregistering): Released all slaves [ 394.680721][T17739] vlan3: entered promiscuous mode [ 394.690817][T17739] bond0: (slave vlan3): Opening slave failed [ 394.707907][T17742] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 394.781856][T17665] team0: Port device team_slave_0 added [ 394.846574][T17665] team0: Port device team_slave_1 added [ 394.893695][T17641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.925947][T17641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.937528][T17641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.953190][T17665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.960654][T17665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.991118][T17665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.064180][T17641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.187842][T17665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.213820][T17665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.271921][T17665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.333446][ T6219] hsr_slave_0: left promiscuous mode [ 395.342857][ T6219] hsr_slave_1: left promiscuous mode [ 395.360848][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.369153][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.383658][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.391193][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.418845][ T6219] veth1_macvtap: left promiscuous mode [ 395.424628][ T6219] veth0_macvtap: left promiscuous mode [ 395.430252][ T6219] veth1_vlan: left promiscuous mode [ 395.437189][ T6219] veth0_vlan: left promiscuous mode [ 395.700233][T17789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.901186][ T6219] team0 (unregistering): Port device team_slave_1 removed [ 395.946541][ T6219] team0 (unregistering): Port device team_slave_0 removed [ 396.115198][ T5837] Bluetooth: hci2: command tx timeout [ 396.353440][T17778] tipc: Enabling of bearer rejected, media not registered [ 396.434410][ T5837] Bluetooth: hci0: command tx timeout [ 396.498673][T17665] hsr_slave_0: entered promiscuous mode [ 396.505324][T17665] hsr_slave_1: entered promiscuous mode [ 396.511421][T17665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.521263][T17665] Cannot create hsr debugfs directory [ 396.719035][T17801] xt_CT: No such helper "pptp" [ 396.987755][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.006861][T17814] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3201'. [ 397.082639][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.128743][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.135917][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.198715][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.205875][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.436766][T17665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.467075][T17665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.482498][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3209'. [ 397.486737][T17838] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 397.499909][T17838] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3210'. [ 397.514705][T17665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.523278][T17841] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 397.526249][T17665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.573282][T17844] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 397.594959][T17844] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3210'. [ 397.758134][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.815235][T17855] netlink: 'syz.4.3214': attribute type 1 has an invalid length. [ 397.898377][T17862] vlan5: entered promiscuous mode [ 397.907559][T17862] bond5: (slave vlan5): Opening slave failed [ 397.949703][T17864] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 397.963256][T17665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.981149][T17641] veth0_vlan: entered promiscuous mode [ 398.001481][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 398.025763][T17665] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.068878][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.076046][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.090947][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.098125][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.115283][T17641] veth1_vlan: entered promiscuous mode [ 398.179170][T17665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.194250][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 398.209327][T17665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.255439][T17641] veth0_macvtap: entered promiscuous mode [ 398.277224][T17641] veth1_macvtap: entered promiscuous mode [ 398.316747][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.347507][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.362590][T17641] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.387348][T17641] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.396766][T17641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.411381][T17641] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.516539][ T54] Bluetooth: hci0: command tx timeout [ 398.585164][T17883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3221'. [ 398.636314][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.647840][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.712806][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.732105][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.750073][T17890] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 398.831686][T17665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.898628][T17665] veth0_vlan: entered promiscuous mode [ 398.923595][T17665] veth1_vlan: entered promiscuous mode [ 398.991308][T17665] veth0_macvtap: entered promiscuous mode [ 399.152892][T17907] xt_CT: No such helper "pptp" [ 399.168456][T17665] veth1_macvtap: entered promiscuous mode [ 399.223661][T17665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.244072][T17665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.271149][T17665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.296290][T17665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.317251][T17665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.352544][T17665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.379778][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3230'. [ 399.382208][T17665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.406365][T17665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.418481][T17665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.432479][T17920] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 399.442944][T17665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.464574][T17919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3230'. [ 399.666618][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.699979][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.713029][T17938] netlink: 'syz.4.3234': attribute type 21 has an invalid length. [ 399.764337][T17938] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.881191][ T6226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.942240][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.966048][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.981252][ T6226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.053467][T17753] ------------[ cut here ]------------ [ 400.059436][T17753] refcount_t: underflow; use-after-free. [ 400.065406][T17753] WARNING: CPU: 0 PID: 17753 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 400.074988][T17753] Modules linked in: [ 400.078866][T17753] CPU: 0 UID: 0 PID: 17753 Comm: kbnepd bnep0 Not tainted 6.14.0-rc5-syzkaller-00111-g115ef44a9822 #0 [ 400.089947][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.100117][T17753] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 400.106762][T17753] Code: 80 b3 80 8c e8 d7 2a 8c fc 90 0f 0b 90 90 eb 99 e8 db 6d cc fc c6 05 8c af 31 0b 01 90 48 c7 c7 e0 b3 80 8c e8 b7 2a 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 6d cc fc c6 05 66 af 31 0b 01 90 [ 400.126823][T17753] RSP: 0018:ffffc90003c3f720 EFLAGS: 00010246 [ 400.132902][T17753] RAX: e6b885f34e88ff00 RBX: ffff888025c2e478 RCX: ffff88807b143c00 [ 400.140977][T17753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.148965][T17753] RBP: 0000000000000003 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 400.156932][T17753] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff888025c2e460 [ 400.165241][T17753] R13: 1ffff11004b85c8c R14: ffff888025c2e460 R15: ffffffff8638a1d0 [ 400.173202][T17753] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 400.182179][T17753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.188763][T17753] CR2: 00007ffe7822fba8 CR3: 000000000e938000 CR4: 00000000003526f0 [ 400.196740][T17753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.204719][T17753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.212840][T17753] Call Trace: [ 400.216401][T17753] [ 400.219319][T17753] ? __warn+0x165/0x4d0 [ 400.223460][T17753] ? refcount_warn_saturate+0x15a/0x1d0 [ 400.229027][T17753] ? report_bug+0x2b3/0x500 [ 400.233512][T17753] ? refcount_warn_saturate+0x15a/0x1d0 [ 400.239064][T17753] ? handle_bug+0x60/0x90 [ 400.243384][T17753] ? exc_invalid_op+0x1a/0x50 [ 400.248071][T17753] ? asm_exc_invalid_op+0x1a/0x20 [ 400.253081][T17753] ? __pfx_klist_children_put+0x10/0x10 [ 400.258647][T17753] ? __warn_printk+0x292/0x360 [ 400.263401][T17753] ? refcount_warn_saturate+0x15a/0x1d0 [ 400.269009][T17753] klist_dec_and_del+0x3ec/0x3f0 [ 400.273936][T17753] ? __pfx_klist_children_put+0x10/0x10 [ 400.279478][T17753] klist_del+0xa7/0x110 [ 400.283616][T17753] device_del+0x2c9/0x9b0 [ 400.287947][T17753] ? __pfx_device_del+0x10/0x10 [ 400.292869][T17753] ? netdev_unregister_kobject+0x178/0x250 [ 400.298675][T17753] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 400.305099][T17753] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 400.312012][T17753] ? trace_contention_end+0x3c/0x120 [ 400.317635][T17753] ? __mutex_lock+0x397/0x1010 [ 400.322397][T17753] ? rtnl_net_dev_lock+0x271/0x320 [ 400.327535][T17753] ? __pfx___mutex_lock+0x10/0x10 [ 400.332542][T17753] ? __pfx_lock_release+0x10/0x10 [ 400.337585][T17753] unregister_netdevice_queue+0x303/0x370 [ 400.343288][T17753] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 400.349531][T17753] ? rtnl_net_dev_lock+0x37/0x320 [ 400.354554][T17753] ? rtnl_net_dev_lock+0x302/0x320 [ 400.359645][T17753] ? rtnl_net_dev_lock+0x37/0x320 [ 400.364911][T17753] unregister_netdev+0x1f/0x60 [ 400.369656][T17753] bnep_session+0x2e4e/0x3040 [ 400.374366][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.379374][T17753] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 400.385266][T17753] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 400.391579][T17753] ? __pfx_woken_wake_function+0x10/0x10 [ 400.397219][T17753] ? __kthread_parkme+0x169/0x1d0 [ 400.402227][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.407305][T17753] kthread+0x7a9/0x920 [ 400.411356][T17753] ? __pfx_kthread+0x10/0x10 [ 400.416164][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.421175][T17753] ? __pfx_kthread+0x10/0x10 [ 400.425912][T17753] ? __pfx_kthread+0x10/0x10 [ 400.430493][T17753] ? __pfx_kthread+0x10/0x10 [ 400.435088][T17753] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.440284][T17753] ? lockdep_hardirqs_on+0x99/0x150 [ 400.445480][T17753] ? __pfx_kthread+0x10/0x10 [ 400.450063][T17753] ret_from_fork+0x4b/0x80 [ 400.454480][T17753] ? __pfx_kthread+0x10/0x10 [ 400.459059][T17753] ret_from_fork_asm+0x1a/0x30 [ 400.463864][T17753] [ 400.467087][T17753] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.474357][T17753] CPU: 0 UID: 0 PID: 17753 Comm: kbnepd bnep0 Not tainted 6.14.0-rc5-syzkaller-00111-g115ef44a9822 #0 [ 400.485291][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.495328][T17753] Call Trace: [ 400.498587][T17753] [ 400.501498][T17753] dump_stack_lvl+0x241/0x360 [ 400.506171][T17753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.511347][T17753] ? __pfx__printk+0x10/0x10 [ 400.515916][T17753] ? _printk+0xd5/0x120 [ 400.520050][T17753] ? __init_begin+0x41000/0x41000 [ 400.525054][T17753] ? vscnprintf+0x5d/0x90 [ 400.529364][T17753] panic+0x349/0x880 [ 400.533240][T17753] ? __warn+0x174/0x4d0 [ 400.537385][T17753] ? __pfx_panic+0x10/0x10 [ 400.541790][T17753] ? ret_from_fork_asm+0x1a/0x30 [ 400.546712][T17753] __warn+0x344/0x4d0 [ 400.550703][T17753] ? refcount_warn_saturate+0x15a/0x1d0 [ 400.556234][T17753] report_bug+0x2b3/0x500 [ 400.560546][T17753] ? refcount_warn_saturate+0x15a/0x1d0 [ 400.566074][T17753] handle_bug+0x60/0x90 [ 400.570209][T17753] exc_invalid_op+0x1a/0x50 [ 400.574694][T17753] asm_exc_invalid_op+0x1a/0x20 [ 400.579529][T17753] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 400.585682][T17753] Code: 80 b3 80 8c e8 d7 2a 8c fc 90 0f 0b 90 90 eb 99 e8 db 6d cc fc c6 05 8c af 31 0b 01 90 48 c7 c7 e0 b3 80 8c e8 b7 2a 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 6d cc fc c6 05 66 af 31 0b 01 90 [ 400.605282][T17753] RSP: 0018:ffffc90003c3f720 EFLAGS: 00010246 [ 400.611337][T17753] RAX: e6b885f34e88ff00 RBX: ffff888025c2e478 RCX: ffff88807b143c00 [ 400.619287][T17753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.627239][T17753] RBP: 0000000000000003 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 400.635208][T17753] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff888025c2e460 [ 400.643155][T17753] R13: 1ffff11004b85c8c R14: ffff888025c2e460 R15: ffffffff8638a1d0 [ 400.651104][T17753] ? __pfx_klist_children_put+0x10/0x10 [ 400.656651][T17753] ? __warn_printk+0x292/0x360 [ 400.661406][T17753] klist_dec_and_del+0x3ec/0x3f0 [ 400.666350][T17753] ? __pfx_klist_children_put+0x10/0x10 [ 400.671872][T17753] klist_del+0xa7/0x110 [ 400.676009][T17753] device_del+0x2c9/0x9b0 [ 400.680324][T17753] ? __pfx_device_del+0x10/0x10 [ 400.685155][T17753] ? netdev_unregister_kobject+0x178/0x250 [ 400.690944][T17753] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 400.697341][T17753] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 400.704077][T17753] ? trace_contention_end+0x3c/0x120 [ 400.709339][T17753] ? __mutex_lock+0x397/0x1010 [ 400.714092][T17753] ? rtnl_net_dev_lock+0x271/0x320 [ 400.719183][T17753] ? __pfx___mutex_lock+0x10/0x10 [ 400.724186][T17753] ? __pfx_lock_release+0x10/0x10 [ 400.729193][T17753] unregister_netdevice_queue+0x303/0x370 [ 400.734889][T17753] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 400.741107][T17753] ? rtnl_net_dev_lock+0x37/0x320 [ 400.746106][T17753] ? rtnl_net_dev_lock+0x302/0x320 [ 400.751195][T17753] ? rtnl_net_dev_lock+0x37/0x320 [ 400.756198][T17753] unregister_netdev+0x1f/0x60 [ 400.760937][T17753] bnep_session+0x2e4e/0x3040 [ 400.765611][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.770627][T17753] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 400.776496][T17753] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 400.782814][T17753] ? __pfx_woken_wake_function+0x10/0x10 [ 400.788430][T17753] ? __kthread_parkme+0x169/0x1d0 [ 400.793438][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.798448][T17753] kthread+0x7a9/0x920 [ 400.802495][T17753] ? __pfx_kthread+0x10/0x10 [ 400.807066][T17753] ? __pfx_bnep_session+0x10/0x10 [ 400.812073][T17753] ? __pfx_kthread+0x10/0x10 [ 400.816644][T17753] ? __pfx_kthread+0x10/0x10 [ 400.821217][T17753] ? __pfx_kthread+0x10/0x10 [ 400.825792][T17753] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.830982][T17753] ? lockdep_hardirqs_on+0x99/0x150 [ 400.836161][T17753] ? __pfx_kthread+0x10/0x10 [ 400.840752][T17753] ret_from_fork+0x4b/0x80 [ 400.845160][T17753] ? __pfx_kthread+0x10/0x10 [ 400.849747][T17753] ret_from_fork_asm+0x1a/0x30 [ 400.854496][T17753] [ 401.925996][T17753] Shutting down cpus with NMI [ 401.930986][T17753] Kernel Offset: disabled [ 401.935445][T17753] Rebooting in 86400 seconds..