last executing test programs: 1m24.639997203s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m9.975482907s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.947866684s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.781695594s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.958924979s ago: executing program 0 (id=762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 31.935290924s ago: executing program 0 (id=763): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r6, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 31.767697291s ago: executing program 0 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) 31.693769484s ago: executing program 0 (id=767): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt(r0, 0x7, 0x5, &(0x7f0000000700)="8a8b182a44e9af9a89330ebe924c6626f05a7d57855c278156765373634b71001979c6be0a75d0f6f6537c28e475e854c60dd74dc8bae4d9737febc2b92cc3c7d87bdbc05cf43bf9d8c619ba8210a45bc9de634f07ee101d97f84757c4cd2b8b852e852e1bbb0605448d9c272391309aa9f8e26d5737a713c4915fd588359fd6fc88ff55ee2c0fd706c11baa73473bce89bda3549a0a0cc1bd801d5ea330f00fa0836dc31c31cb5802af6145e5cce1b27001dcf1dcd73863acf475c7a99bcf78c74c978abf81352df529c66ce42f906c5a84d29ec740f4921c47866d30d11ccb502188992d7a3267ab2181067d406ab32fe1", 0xf2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_fd_write\x00', r2, 0x0, 0xa25e}, 0x18) 28.272893466s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.185613835s ago: executing program 0 (id=767): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt(r0, 0x7, 0x5, &(0x7f0000000700)="8a8b182a44e9af9a89330ebe924c6626f05a7d57855c278156765373634b71001979c6be0a75d0f6f6537c28e475e854c60dd74dc8bae4d9737febc2b92cc3c7d87bdbc05cf43bf9d8c619ba8210a45bc9de634f07ee101d97f84757c4cd2b8b852e852e1bbb0605448d9c272391309aa9f8e26d5737a713c4915fd588359fd6fc88ff55ee2c0fd706c11baa73473bce89bda3549a0a0cc1bd801d5ea330f00fa0836dc31c31cb5802af6145e5cce1b27001dcf1dcd73863acf475c7a99bcf78c74c978abf81352df529c66ce42f906c5a84d29ec740f4921c47866d30d11ccb502188992d7a3267ab2181067d406ab32fe1", 0xf2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_fd_write\x00', r2, 0x0, 0xa25e}, 0x18) 15.152677179s ago: executing program 3 (id=368): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4057800"/32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.608170939s ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000040000fce2000000a4"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r5, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x762c]}], [@TCA_POLICE_TBF={0xffffffffffffff9a, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4, 0x101}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080), 0x4) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) shutdown(r7, 0x1) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x3ff, 0x8, 0x815, 0x81, 0x0, 0x2]}, &(0x7f0000000080)=0x78) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x7) 13.330155419s ago: executing program 1 (id=888): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xcd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0xf0, 0x2d0, 0xffffffff, 0x1e0, 0x1e0, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv4=@multicast1, @ipv4=@loopback, @icmp_id=0x65, @gre_key=0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x29}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@broadcast, @gre_key=0x1, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'wlan0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 12.539042051s ago: executing program 1 (id=890): socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x9ab7) socket$inet(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@deltaction={0xc4, 0x31, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44}, 0x88d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000c29334ea6632b8296a8e21ceb11bbfefb38623ae31bcff871735cec5902e2e1ed87cc56c02418e96cdc38e9823e1383679fdc7d2720b5ab9d8be033425e7f495ec085d60c50846b9a02b9fb2965282292bca3cb9475cc637ded43f50b7dc25a1b71ad4ab7a0252347b18ae83b8fe6d7b5c3eb333fee52ca3e99795", @ANYRESHEX, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) 12.417644669s ago: executing program 1 (id=891): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/58, 0x3a}], 0x1}, 0x2}], 0x1, 0x40, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'hugetlb'}, {0x6, 'cpuacct'}]}, 0x33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'hugetlb'}, {0x6, 'cpuacct'}]}, 0x33) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000300)={0x7, 0x28, [0x8, 0x7f, 0xffffffffffffffff, 0x2], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008844}, 0x4000001) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 10.814143661s ago: executing program 1 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3524d61292e53bf}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x308}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4088) 10.572431468s ago: executing program 1 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x1, 0x2, {{0x8, 0x4, 0x2, 0x1a, 0x20, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x9b, [@empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newneigh={0x54, 0x1c, 0x300, 0x70bd2a, 0x25dfdbfe, {0x7d9cf13539940fec, 0x0, 0x0, r2, 0x0, 0x9e, 0x3}, [@NDA_VNI={0x8, 0x7, 0x8}, @NDA_VNI={0x8, 0x7, 0x8001}, @NDA_FLAGS_EXT={0x8}, @NDA_VNI={0x8, 0x7, 0x8}, @NDA_NH_ID={0x8, 0xd, 0x200}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_NH_ID={0x8, 0xd, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0x1, 0x9, 0x1, 0x8000, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x44, 0x6c, 0x1, 0x80, 0xfe, 0x4a, 0xd, 0x66, 0x4, [0x40, 0x9, 0xf, 0xffff, 0x6, 0xc, 0xfffffeff, 0x2174]}}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r5, r0, 0x23, 0x2, r0, @void, @value=r0, @void, @void, r4}, 0x20) 2.872342558s ago: executing program 2 (id=943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000009080004000000000008000500e00000020f000700266e"], 0x34}, 0x2, 0x34005}, 0x4040004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x780, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x76c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ecb(camellia)\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c11f4fe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x689, 0x4, "b363761a7cfacd7c6e293935680191f0660619778aaa810d4213b87560321a18f220aa66e8b7fd7fd2d67ed439c76419631c931047456837ff2397d2e17ffff4f3037602269f7c9354d092a8933fa13f3c620361f6d75dee6b1f18f77a01d33faf2de1a6b043f8134d5649d3095ca72cacb5d5bab7b3e7d6d90bccaa39e59e3f8f7580e34312e73dc4146ab8d9ad7796ec5fc249ac711eb1397c10de64f1f8c92d924d894ed658a27291726ba16393195c243b76a47645b1582b18bbde7cc7f4c327243bed5db534d6abaeaa2725e7f35e413e28fa733011947878ee8508be154edad67b6c3ef39903fe2e6bb7381af43e402095b736cf0653dd8c8557ee6c9ac037f1f7a59a8b72aea4b3fe881641a18c8150696b066949f83a7174423c22884c0b5e4460bb3095cb8ceea124d0a2ebad87edb47072e6ae928c311c5129ddc5b449ac6e0d7e7ab94e357888a790db7fefb5053ddf6fa3fe642324965ebf634c8415c8427c6cdaa9e6e6f5d97a3322c89619fae5a1e35f186e15736a4b2d22e67b61e75f552aa0fba5a0c794f2ab6424d85bfe31f537032f0779c47f9a30304546c19c6c22be837849b4c31f9f1bcd61ed5059306269d3971a733ae3952ce5935c3399aefce6ccbde5561bbfb59fcb5546e1df33532f9aab3881501b23112561001fef38187acf6c9223e30a3db03a3a6c6e89f5544a4636d9c8e3c572fac48951d7ffb4c9069108e5e2a29656b202af7561d6b329f343b32fb7fabf6d397d06ac6776d6b00d0e6382b1e1fcfe4381add9ff731aa68edabab9ba2922469750364a8efe704eb0574f80cba81cf87caa3eaa7eef7e9b7d352939c637a12de4838fe366cf8237adec12279d588d98efafca529d8d53edfe7a1dbd9f5c550c944b14e9417fe29c9f6332efece9ac31af4686030e722ea4be629f1e3c72a914f1a058274f5e24d071cb57ff992257bf3b706da7492293447fadee9761ac3e20735b7d8fcff609745b7c21ee6447433f3d59924832ed5161e4bda5c9b20154a453de5bcbc7c423463a6d5fc0a23a29c89ba711c0c2699ca9362c09e8a20248fc367968ccbaf8d8cbacecb9c74b348528051321ad8d4ea32b0eb7e934fe9e81131ea7c6d7999cc311df271a5fde6222e4542ddb48eb90704ae11fa3dcfa9f6705bd59d087af7ae0589927deb8e825e15b618b8e766b24b5a71eb6ab2d0d51000a64166a759c75951827f0e4ceedc4bfb86f850f1033cf3b88a1f7e44d99119bc9ba78fbd6b0e2ed0f1d9345a9ac408026af7ff89bd6f6f054824ef5be21093bd60e75facfaf7d7fad1f77b0d597c41939ef71900d2c8c3e9474702f7a243080162287f482708c9fff1f2993d58d3b2671423cf29689b498edd374eb3661ce92716224d4f33092437b02df62469046f3ff0977b7b7caf8ba5b496974d98422d45af9e0eed35c2f8b5a2daf75beacc1a264c99767b825ea5b419f44062c012fcab20e987054473b4b8af7cc9d3f4fbe5320df73eea7b6ccf0f3ac8b5f9baff9863309b52dfb3823a9eb194db1c7c005dd173ff7c53f11a4ce2a9fd000a69cad98db1febdd66751fedbc38269c8dcfa3a7b20d138bcc4b4f9f885bda1f9cc9ac31f8367632778709804897057a952f9610de4b6851fb49ca887ce9d84c00d3ce871776e6ca869a4745a0acd2cfc1673d01b7814d2079bf2d18fde249b1760c39f2fdbc7f54f6ddaec4eb818797cdd3b1c86fc5edd99110c37a9d793ce73231e248babc562633156c5138510664d7200e0042b7e827e2665e3701dea1fe9fb8395be59f619e0715efc92b26a0690efbdbe110ca668838f6ef730b071c46d76aeae216bf462636af2f5eb7bec0326a73456e070ba0e1a342989d2f489d954f40a463a7ff3a3fb56cda122b600b4b02d6d9c221db1b76f065d4cde017233654c909021491a8c37f37ea707b1658984cdb21d69def41996bb4194bfc74215b9b2c50b7c559d3ea24680f607fb0753afdfeeb90852512be1d08f75362673ae27535969bcd371bf00076292322a4c8903525b429e8a3045c35ab50ee635757ffdc12674866ceebc2bcef544640edc7179e3acbf16183cc8f88c6183765e365d530de6e7b83e8c1c38a73fdd39830bfe69373b109f73ab4f2fc2a05c0d48647c485e15be50fb8b2b8d65fe50c56798f769664d2734b572f6ecb9354833e9c551b8e3e7bf20497bee9f9c495ef92349bf1d312905b2552b1dcb0eb471d322ca9f7943906b6d12bdf93113686149f0fabe3269634a36c1fb7f209ae26355c95d5e5d024ab33bc02c9eed220f02ffa8f8ce1e2156b6dcbacf861e96a932c10c01d84997ba5d3e4366096e0a7ffa442"}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 2.70276118s ago: executing program 4 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r1, 0x3, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x24040844) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x40000) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r3, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) 2.535540897s ago: executing program 4 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd70000300000000000008", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c0002800800020006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x10, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0xb0b}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x70, r14, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "3f2acc24f1279fe74a7985"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f851cc1083"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x801) 2.274447849s ago: executing program 4 (id=946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2caf03c82892281223f10e10", 0xc}], 0x1, 0x0, 0x0, 0x2c}, 0x4044844) 2.160143821s ago: executing program 0 (id=767): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt(r0, 0x7, 0x5, &(0x7f0000000700)="8a8b182a44e9af9a89330ebe924c6626f05a7d57855c278156765373634b71001979c6be0a75d0f6f6537c28e475e854c60dd74dc8bae4d9737febc2b92cc3c7d87bdbc05cf43bf9d8c619ba8210a45bc9de634f07ee101d97f84757c4cd2b8b852e852e1bbb0605448d9c272391309aa9f8e26d5737a713c4915fd588359fd6fc88ff55ee2c0fd706c11baa73473bce89bda3549a0a0cc1bd801d5ea330f00fa0836dc31c31cb5802af6145e5cce1b27001dcf1dcd73863acf475c7a99bcf78c74c978abf81352df529c66ce42f906c5a84d29ec740f4921c47866d30d11ccb502188992d7a3267ab2181067d406ab32fe1", 0xf2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_fd_write\x00', r2, 0x0, 0xa25e}, 0x18) 2.155679746s ago: executing program 4 (id=947): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x5) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, 0x0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000007b0e532488a9b1ca008ccdfbf70e70303d4d040f6a9ecd6c5097efe10a8603d0219e16dfbb2ac13c0403d4637310", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)='/proc/net\x00\x00t4/c+\x0fG\xf9\xe1K\fX\a0\x04\x00\x00\x82D\x80\xa2EZ\xad}\\-\xd1\x96R\x91\xd7x\xb5\xfb\xc4N\xc7\xb3+\xb3qW\xa9\x83\x9b\x84\xbc\xe9\xc6$\x9b/\xda\x9d=P\xd1Xzk\xb5\x95\x18\xd7\xa8\xcc\x99v\x84hQ\xf1fZ\n\xb6\x02\xd5\xf1\xb4b\xa6\aM+\xc1\xe8\"\x0f\x89\xba\xb3\x06:a\xd335^x\xaf\x14\x82'}, 0x30) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r11], 0x1c}}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.727554404s ago: executing program 2 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x4, 0xb9c, 0x15, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x10, 0x3e, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x8c, 0x4a, 0x800, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x78, 0x0, r1, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000800}, 0x20008081) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX], 0x44}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x4040000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x48, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) accept(r6, 0x0, 0x0) 1.646561088s ago: executing program 4 (id=949): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb0", 0x9}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100405ff2cbd4b5f0add73c98491ef39", @ANYRES32=0x0, @ANYBLOB="0200020000000000240012800b00010065727370616e00001400028005001600010000000600030004000000"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000000000fddbdf250704", @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.255805923s ago: executing program 2 (id=950): unshare(0x2a020400) unshare(0x800) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4407001ef1ec4806f12c61cef341e7d47f33beafd7b2b3a6f8d4", @ANYRES32=r1, @ANYBLOB="0100000000000000080016800400028005001100000000001400030076657468305f746f5f62617461647600"], 0x44}}, 0x8054) 1.155473934s ago: executing program 4 (id=951): unshare(0x68040200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffffffffffff94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0x0, 0x4}}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r6, {0xfff3}, {0xffe0, 0xfff2}, {0x2, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20008004) 1.046503901s ago: executing program 2 (id=952): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000bd9e9694000000080045000024000000000073907800000300e000000100000000fe9a90780200000000000000e4023a00e1ec4feb68e1496ae1edb463da05bd0b2d6ae1b51c4d21f64b1f29792b04460e1896c7d81a15631fc17598ee1fe740e99f0aa8f24adbc7dd2701a37183bda1c8a685beba7059fd86df0a94ea771250bc1c87d3bd5a326916db72e89c36c6a0a614d9a912b513f14845baadba504c24ddc55879e0696fb59326709d876e5d3207d9ac44dff8d7585685fd53aa790bfbf095"], 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@empty, 0x4e23, 0x2000, 0xc3, 0x20012d5c, 0x12d5c}}, 0x44) r6 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000580)) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) 125.374666ms ago: executing program 2 (id=953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d30000000000000080001"], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, r2, 0x0) 0s ago: executing program 2 (id=954): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x4000084) kernel console output (not intermixed with test programs): t: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 116.859554][ T6768] : (slave bond_slave_0): Releasing backup interface [ 116.903652][ T6768] : (slave bond_slave_1): Releasing backup interface [ 116.962684][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 116.973218][ T6768] team0: Port device team_slave_0 removed [ 117.011656][ T6768] team0: Port device team_slave_1 removed [ 117.031458][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.050047][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.077440][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.106853][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.197339][ T6788] lo speed is unknown, defaulting to 1000 [ 117.217622][ T6788] lo speed is unknown, defaulting to 1000 [ 117.262678][ T6788] lo speed is unknown, defaulting to 1000 [ 117.313545][ T6788] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.358725][ T6789] lo speed is unknown, defaulting to 1000 [ 117.404511][ T6788] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.501741][ T6787] lo speed is unknown, defaulting to 1000 [ 117.635569][ T6788] lo speed is unknown, defaulting to 1000 [ 117.700352][ T6788] lo speed is unknown, defaulting to 1000 [ 117.736423][ T6788] lo speed is unknown, defaulting to 1000 [ 117.751586][ T6788] lo speed is unknown, defaulting to 1000 [ 117.775757][ T6788] lo speed is unknown, defaulting to 1000 [ 117.870713][ T6788] lo speed is unknown, defaulting to 1000 [ 118.216146][ T6828] lo speed is unknown, defaulting to 1000 [ 118.480438][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 118.489439][ T6841] netlink: 'syz.0.234': attribute type 12 has an invalid length. [ 119.704051][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 119.714455][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 120.180307][ T6877] Cannot find del_set index 0 as target [ 120.370995][ T6879] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 120.690540][ T6903] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 120.764867][ T6901] lo speed is unknown, defaulting to 1000 [ 120.945741][ T6912] netlink: 332 bytes leftover after parsing attributes in process `syz.4.257'. [ 120.976052][ T6912] netlink: 104 bytes leftover after parsing attributes in process `syz.4.257'. [ 120.985076][ T6912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.257'. [ 121.312551][ T6923] lo speed is unknown, defaulting to 1000 [ 121.765501][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 122.521665][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 123.346737][ T6928] lo speed is unknown, defaulting to 1000 [ 123.482278][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 123.482946][ T6976] lo speed is unknown, defaulting to 1000 [ 123.731687][ T6990] netlink: 'syz.0.275': attribute type 39 has an invalid length. [ 124.103212][ T6994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.333276][ T7004] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.362695][ T7004] IPv6: NLM_F_REPLACE set, but no existing node found! [ 124.383107][ T6994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.457000][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 124.569061][ T6994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.590179][ T7011] Bluetooth: MGMT ver 1.23 [ 124.730881][ T6994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.017071][ T6994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.072380][ T6994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.195109][ T6994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.266050][ T6994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.103315][ T7086] x_tables: duplicate underflow at hook 2 [ 126.113145][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.142085][ T7087] netlink: 'syz.1.303': attribute type 30 has an invalid length. [ 126.173879][ T7087] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.183109][ T7087] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.191928][ T7087] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.200830][ T7087] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.210519][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 126.229832][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.259479][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.270453][ T7084] netlink: 10 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.306248][ T7084] nbd: socks must be embedded in a SOCK_ITEM attr [ 126.683853][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.311'. [ 126.831834][ T7130] netlink: 76 bytes leftover after parsing attributes in process `syz.0.314'. [ 127.013870][ T7143] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.045413][ T7143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.142097][ T7149] syzkaller1: entered promiscuous mode [ 127.160353][ T7149] syzkaller1: entered allmulticast mode [ 127.514645][ T7171] x_tables: duplicate underflow at hook 2 [ 127.780139][ T7181] raw_sendmsg: syz.0.326 forgot to set AF_INET. Fix it! [ 128.147579][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.334'. [ 128.582521][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 128.922433][ T7232] syzkaller0: entered promiscuous mode [ 128.938307][ T7232] syzkaller0: entered allmulticast mode [ 129.375639][ T7253] netlink: zone id is out of range [ 129.385066][ T7253] netlink: zone id is out of range [ 129.403967][ T7253] netlink: zone id is out of range [ 129.418375][ T7253] netlink: zone id is out of range [ 129.435235][ T7253] netlink: zone id is out of range [ 129.437345][ T7263] netlink: 'syz.1.349': attribute type 35 has an invalid length. [ 129.451222][ T7253] netlink: zone id is out of range [ 129.460210][ T7253] netlink: zone id is out of range [ 129.465447][ T7253] netlink: zone id is out of range [ 129.471823][ T7253] netlink: zone id is out of range [ 129.579235][ T7270] __nla_validate_parse: 5 callbacks suppressed [ 129.579253][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'. [ 130.730567][ T7279] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 130.774639][ T7290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.355'. [ 130.817567][ T7282] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 130.975819][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.050084][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.053541][ T7307] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 131.067816][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.085567][ T7303] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -1 [ 131.168288][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.210806][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.244462][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.270504][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.293424][ T7314] netlink: 'syz.4.362': attribute type 2 has an invalid length. [ 131.301750][ T7303] wg1 speed is unknown, defaulting to 1000 [ 131.316770][ T7314] Bluetooth: MGMT ver 1.23 [ 131.362860][ T7314] geneve2: entered promiscuous mode [ 131.581357][ T7320] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 131.804482][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 131.826183][ T7326] netlink: 'syz.4.367': attribute type 7 has an invalid length. [ 131.833912][ T7326] netlink: 'syz.4.367': attribute type 8 has an invalid length. [ 131.862386][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 131.885646][ T3501] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.001233][ T3501] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.059488][ T7328] lo speed is unknown, defaulting to 1000 [ 132.069935][ T7328] wg1 speed is unknown, defaulting to 1000 [ 132.188661][ T3501] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.299247][ T3501] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.620318][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 132.620514][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.373'. [ 132.639857][ T7346] sit1: entered allmulticast mode [ 132.788030][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794671][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.824027][ T7352] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 132.861445][ T5913] wg1 speed is unknown, defaulting to 1000 [ 132.916318][ T5913] syz0: Port: 1 Link DOWN [ 132.960200][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.968819][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.982674][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.982824][ T7359] tun0: tun_chr_ioctl cmd 1074025677 [ 133.012270][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.018088][ T7359] tun0: linktype set to 773 [ 133.030324][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.038569][ T3501] bridge_slave_1: left allmulticast mode [ 133.044477][ T3501] bridge_slave_1: left promiscuous mode [ 133.077171][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.099349][ T3501] bridge_slave_0: left allmulticast mode [ 133.105064][ T3501] bridge_slave_0: left promiscuous mode [ 133.121330][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.285013][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 133.615411][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.624417][ T3501] bond_slave_0: left promiscuous mode [ 133.632688][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.642066][ T3501] bond_slave_1: left promiscuous mode [ 133.649293][ T3501] bond0 (unregistering): Released all slaves [ 133.667267][ T7366] netlink: 152 bytes leftover after parsing attributes in process `syz.2.378'. [ 133.683013][ T7366] net_ratelimit: 11 callbacks suppressed [ 133.683027][ T7366] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 133.784411][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 133.808412][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 133.846402][ T3501] tipc: Left network mode [ 133.898916][ T7357] lo speed is unknown, defaulting to 1000 [ 133.941195][ T7357] wg1 speed is unknown, defaulting to 1000 [ 134.568489][ T7401] bridge0: port 1(macvlan2) entered blocking state [ 134.608070][ T7401] bridge0: port 1(macvlan2) entered disabled state [ 134.642715][ T7401] macvlan2: entered allmulticast mode [ 134.708047][ T7401] macvlan2: left allmulticast mode [ 135.076226][ T5847] Bluetooth: hci1: command tx timeout [ 135.179653][ T3501] hsr_slave_0: left promiscuous mode [ 135.235275][ T3501] hsr_slave_1: left promiscuous mode [ 135.261449][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.306139][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.337414][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.369041][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.430714][ T3501] veth1_macvtap: left promiscuous mode [ 135.456554][ T3501] veth0_macvtap: left promiscuous mode [ 135.462694][ T3501] veth1_vlan: left promiscuous mode [ 135.469562][ T3501] veth0_vlan: left promiscuous mode [ 135.892928][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 135.933540][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 136.390874][ T7441] netlink: 'syz.4.392': attribute type 11 has an invalid length. [ 136.626898][ T7455] veth1_to_team: entered promiscuous mode [ 136.668044][ T7455] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 136.693006][ T7459] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 136.708494][ T7459] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 136.848225][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 136.893300][ T7471] netlink: 'syz.4.398': attribute type 2 has an invalid length. [ 136.899790][ T7468] __nla_validate_parse: 3 callbacks suppressed [ 136.899810][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 136.913642][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 136.927440][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 136.940186][ T7473] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 136.977865][ T7473] No such timeout policy "syz0" [ 137.169648][ T5847] Bluetooth: hci1: command tx timeout [ 137.362854][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.390335][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.410578][ T7357] bridge_slave_0: entered allmulticast mode [ 137.428456][ T7357] bridge_slave_0: entered promiscuous mode [ 137.454924][ T3501] IPVS: stop unused estimator thread 0... [ 137.468166][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.498410][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.524898][ T7357] bridge_slave_1: entered allmulticast mode [ 137.549731][ T7357] bridge_slave_1: entered promiscuous mode [ 137.687665][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.733894][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.825760][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 137.899826][ T7357] team0: Port device team_slave_0 added [ 137.913876][ T7520] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 138.038169][ T7357] team0: Port device team_slave_1 added [ 138.204558][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.228206][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.269178][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.319125][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.341916][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.395455][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.448720][ T7531] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.413'. [ 138.637580][ T7357] hsr_slave_0: entered promiscuous mode [ 138.647511][ T7357] hsr_slave_1: entered promiscuous mode [ 138.654070][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.685772][ T7357] Cannot create hsr debugfs directory [ 138.707401][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 138.775500][ T7548] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.982546][ T5847] block nbd0: Wrong magic (0x20000000) [ 139.041436][ T7560] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 139.191203][ T7568] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 139.224215][ T7570] netlink: 666 bytes leftover after parsing attributes in process `syz.0.421'. [ 139.248769][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.250358][ T1342] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.255442][ T5847] Bluetooth: hci1: command tx timeout [ 139.377695][ T3508] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.700246][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 139.705309][ T7585] syzkaller1: entered promiscuous mode [ 139.709360][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 139.761411][ T7585] syzkaller1: entered allmulticast mode [ 139.860431][ T7596] netlink: 176 bytes leftover after parsing attributes in process `syz.1.430'. [ 140.193394][ T7357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.213205][ T7613] x_tables: duplicate underflow at hook 1 [ 140.348546][ T7611] bond0: (slave ip6gretap1): Removing an active aggregator [ 140.370517][ T7611] bond0: (slave ip6gretap1): Releasing backup interface [ 140.461347][ T7357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.512521][ T7357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.639857][ T7357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.066288][ T7658] syzkaller1: entered promiscuous mode [ 141.093304][ T7658] syzkaller1: entered allmulticast mode [ 141.120318][ T7662] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.299398][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.317493][ T5847] Bluetooth: hci1: command tx timeout [ 141.369110][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.423955][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.431214][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.442050][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.449308][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.479131][ T7676] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 141.773073][ T7678] syzkaller0: entered promiscuous mode [ 141.779911][ T7678] syzkaller0: entered allmulticast mode [ 141.846136][ T7675] bond1: (slave gretap1): making interface the new active one [ 141.854732][ T7675] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 142.111239][ T7691] lo speed is unknown, defaulting to 1000 [ 142.302001][ T7707] netlink: 'syz.0.449': attribute type 16 has an invalid length. [ 142.324835][ T7707] netlink: 'syz.0.449': attribute type 17 has an invalid length. [ 143.847069][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.856691][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.944633][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.951990][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.970370][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.977576][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.014113][ T7724] tipc: New replicast peer: 255.255.255.255 [ 144.023107][ T7724] tipc: Enabled bearer , priority 10 [ 144.035881][ T7728] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 144.162757][ T7732] __nla_validate_parse: 4 callbacks suppressed [ 144.162776][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.452'. [ 144.206235][ T7732] netlink: 'syz.1.452': attribute type 7 has an invalid length. [ 144.214369][ T7732] netlink: 'syz.1.452': attribute type 8 has an invalid length. [ 144.262295][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 144.289673][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 144.290822][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 144.401024][ T7742] netlink: 'syz.4.454': attribute type 39 has an invalid length. [ 144.528703][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.562392][ T7744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.455'. [ 144.571862][ T7744] netlink: 64 bytes leftover after parsing attributes in process `syz.0.455'. [ 144.619501][ T7357] veth0_vlan: entered promiscuous mode [ 144.663956][ T7357] veth1_vlan: entered promiscuous mode [ 144.757996][ T7357] veth0_macvtap: entered promiscuous mode [ 144.813298][ T7748] ipt_ECN: cannot use operation on non-tcp rule [ 144.814433][ T7357] veth1_macvtap: entered promiscuous mode [ 144.972296][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.980286][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.016612][ T5827] tipc: Node number set to 2759693790 [ 145.121623][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.142376][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.253135][ T7757] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.263288][ T7757] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.273099][ T7757] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.282187][ T7757] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.321392][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.337136][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.348462][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.359653][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.376915][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.402499][ T7763] syz_tun: entered allmulticast mode [ 145.423794][ T7768] syzkaller1: entered promiscuous mode [ 145.434094][ T7768] syzkaller1: entered allmulticast mode [ 145.451432][ T7763] syz_tun: left allmulticast mode [ 145.511601][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.526836][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.537819][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.549224][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.561622][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.582268][ T7357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.593387][ T7357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.604378][ T7357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.619069][ T7357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.833906][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.863377][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.964239][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.994733][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.234525][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.395295][ T7357] syz-executor (7357) used greatest stack depth: 20200 bytes left [ 146.587154][ T7813] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 146.704890][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.890358][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.985906][ T7815] lo speed is unknown, defaulting to 1000 [ 147.121192][ T7819] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.286251][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.522460][ T7823] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 147.539072][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.561283][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.572206][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.581808][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.590191][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.598314][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.653031][ T7823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.700207][ T7824] bond2: (slave veth3): Enslaving as an active interface with a down link [ 147.737285][ T7826] bond2: (slave dummy0): making interface the new active one [ 147.747232][ T7826] dummy0: entered promiscuous mode [ 147.752897][ T7826] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 147.763712][ T7841] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 147.781255][ T7824] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 147.787494][ T7824] syzkaller0: Linktype set failed because interface is up [ 147.843277][ T7824] syzkaller0: create flow: hash 473253938 index 0 [ 147.860237][ T7836] lo speed is unknown, defaulting to 1000 [ 149.420884][ T7821] syzkaller0 (unregistered): delete flow: hash 473253938 index 0 [ 149.434409][ T7852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.457164][ T7852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.529323][ T7862] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 149.593062][ T7852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.607626][ T7852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.652208][ T5852] Bluetooth: hci1: command tx timeout [ 149.674286][ T7862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.684045][ T7851] lo speed is unknown, defaulting to 1000 [ 149.738967][ T7852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.749453][ T7852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.810145][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 149.867730][ T7852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.878764][ T7852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.912910][ T36] bridge_slave_1: left allmulticast mode [ 149.918903][ T36] bridge_slave_1: left promiscuous mode [ 149.942166][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.953635][ T36] bridge_slave_0: left allmulticast mode [ 149.965164][ T36] bridge_slave_0: left promiscuous mode [ 149.975391][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.977959][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 150.312684][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.324921][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.338613][ T36] bond0 (unregistering): Released all slaves [ 150.738779][ T7852] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.755092][ T7852] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.773721][ T7878] lo speed is unknown, defaulting to 1000 [ 150.872458][ T7852] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.886526][ T7852] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.927335][ T7852] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.935631][ T7852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.073244][ T36] hsr_slave_0: left promiscuous mode [ 151.081498][ T36] hsr_slave_1: left promiscuous mode [ 151.092970][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.103212][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.112524][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.129433][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.164710][ T36] veth1_macvtap: left promiscuous mode [ 151.173899][ T36] veth0_macvtap: left promiscuous mode [ 151.186240][ T36] veth1_vlan: left promiscuous mode [ 151.191795][ T36] veth0_vlan: left promiscuous mode [ 151.351152][ T7900] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 151.717328][ T5852] Bluetooth: hci1: command tx timeout [ 151.840283][ T36] team0 (unregistering): Port device team_slave_1 removed [ 151.883260][ T36] team0 (unregistering): Port device team_slave_0 removed [ 152.294695][ T7852] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.309407][ T7852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.348663][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 152.726645][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.735119][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 152.748440][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.771177][ T7836] bridge_slave_0: entered allmulticast mode [ 152.780134][ T7836] bridge_slave_0: entered promiscuous mode [ 152.811612][ T7917] lo speed is unknown, defaulting to 1000 [ 152.837804][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.856183][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.868095][ T7836] bridge_slave_1: entered allmulticast mode [ 152.875828][ T7836] bridge_slave_1: entered promiscuous mode [ 153.028471][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.119005][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.300128][ T7836] team0: Port device team_slave_0 added [ 153.311766][ T7836] team0: Port device team_slave_1 added [ 153.375718][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 153.425638][ T7953] netlink: 76 bytes leftover after parsing attributes in process `syz.1.513'. [ 153.435881][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 153.468231][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.485531][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.515003][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 153.524115][ T30] audit: type=1800 audit(1745808695.662:4): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.512" name="memory.events" dev="tmpfs" ino=632 res=0 errno=0 [ 153.524217][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.583048][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.599679][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.607977][ T30] audit: type=1804 audit(1745808695.662:5): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.512" name="/newroot/119/memory.events" dev="tmpfs" ino=632 res=1 errno=0 [ 153.628257][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 153.663825][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.699519][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 153.723585][ T7957] 8021q: VLANs not supported on ip6gre0 [ 153.767039][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 153.796870][ T5852] Bluetooth: hci1: command tx timeout [ 153.924770][ T7836] hsr_slave_0: entered promiscuous mode [ 153.944778][ T7836] hsr_slave_1: entered promiscuous mode [ 153.957698][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.966583][ T7836] Cannot create hsr debugfs directory [ 154.072486][ T7976] netlink: 'syz.2.517': attribute type 9 has an invalid length. [ 155.117864][ T8016] __nla_validate_parse: 2 callbacks suppressed [ 155.117883][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.159564][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.171931][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.204204][ T7836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.225579][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.241617][ T8018] netlink: 'syz.0.528': attribute type 18 has an invalid length. [ 155.257896][ T8016] netlink: 'syz.0.528': attribute type 18 has an invalid length. [ 155.296480][ T8024] vxcan1: tx address claim with dlc 0 [ 155.325410][ T7836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.373451][ T7836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.428978][ T7836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.472915][ T8040] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 155.538323][ T8040] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 155.598804][ T8040] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.677778][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 155.814546][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.853787][ T8054] dvmrp0: entered allmulticast mode [ 155.867169][ T8056] dvmrp0: left allmulticast mode [ 155.876122][ T5852] Bluetooth: hci1: command tx timeout [ 155.881088][ T8059] netlink: 'syz.2.539': attribute type 3 has an invalid length. [ 155.970542][ T8059] lo speed is unknown, defaulting to 1000 [ 155.994859][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.012420][ T8064] netlink: 'syz.4.541': attribute type 21 has an invalid length. [ 156.083587][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.090836][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.104817][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.112053][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.146300][ T8064] vlan2: entered promiscuous mode [ 156.156808][ T8064] bond0: entered promiscuous mode [ 156.161892][ T8064] bond_slave_0: entered promiscuous mode [ 156.178230][ T8064] bond_slave_1: entered promiscuous mode [ 156.184245][ T8064] vlan2: entered allmulticast mode [ 156.191536][ T8064] bond0: entered allmulticast mode [ 156.199333][ T8064] bond_slave_0: entered allmulticast mode [ 156.205104][ T8064] bond_slave_1: entered allmulticast mode [ 156.495185][ T8083] netlink: 80 bytes leftover after parsing attributes in process `syz.4.545'. [ 156.536019][ T8085] netlink: 'syz.0.544': attribute type 13 has an invalid length. [ 156.589298][ T8085] netlink: 'syz.0.544': attribute type 17 has an invalid length. [ 156.822556][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.834013][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.846731][ T8085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.866329][ T8097] netlink: 'syz.1.547': attribute type 12 has an invalid length. [ 156.920786][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.979817][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.548'. [ 157.017477][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'. [ 157.045596][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.548'. [ 157.061833][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.548'. [ 157.216172][ T8102] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 157.234978][ T8085] syz.0.544 (8085) used greatest stack depth: 19752 bytes left [ 157.387093][ T8121] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 158.566783][ T8100] syz.1.548: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.588182][ T8100] CPU: 1 UID: 0 PID: 8100 Comm: syz.1.548 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 158.588209][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.588226][ T8100] Call Trace: [ 158.588238][ T8100] [ 158.588247][ T8100] dump_stack_lvl+0x189/0x250 [ 158.588296][ T8100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.588324][ T8100] ? __pfx__printk+0x10/0x10 [ 158.588345][ T8100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 158.588377][ T8100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 158.588402][ T8100] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 158.588427][ T8100] warn_alloc+0x214/0x310 [ 158.588453][ T8100] ? __pfx_warn_alloc+0x10/0x10 [ 158.588487][ T8100] ? __get_vm_area_node+0x1c5/0x2d0 [ 158.588505][ T8100] ? __get_vm_area_node+0x25a/0x2d0 [ 158.588529][ T8100] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 158.588550][ T8100] ? __asan_memset+0x22/0x50 [ 158.588566][ T8100] ? __x64_sys_sendmsg+0x19b/0x260 [ 158.588598][ T8100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.588617][ T8100] ? __kasan_kmalloc_large+0x1a/0xa0 [ 158.588637][ T8100] ? rcu_is_watching+0x15/0xb0 [ 158.588660][ T8100] ? veth_dev_init+0x363/0x570 [ 158.588675][ T8100] ? veth_dev_init+0x363/0x570 [ 158.588688][ T8100] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 158.588707][ T8100] ? veth_dev_init+0x363/0x570 [ 158.588728][ T8100] veth_dev_init+0x363/0x570 [ 158.588748][ T8100] register_netdevice+0x6bc/0x1ae0 [ 158.588773][ T8100] ? snprintf+0xda/0x120 [ 158.588789][ T8100] ? __pfx_register_netdevice+0x10/0x10 [ 158.588806][ T8100] ? __pfx_snprintf+0x10/0x10 [ 158.588820][ T8100] ? __asan_memset+0x22/0x50 [ 158.588834][ T8100] ? dev_addr_mod+0x2ce/0x3d0 [ 158.588854][ T8100] veth_newlink+0x5cc/0xa50 [ 158.588871][ T8100] ? __pfx_veth_newlink+0x10/0x10 [ 158.588886][ T8100] ? percpu_ref_get_many+0x19/0x140 [ 158.588953][ T8100] ? validate_linkmsg+0x765/0x950 [ 158.588979][ T8100] ? __pfx_veth_newlink+0x10/0x10 [ 158.588995][ T8100] rtnl_newlink_create+0x30d/0xb00 [ 158.589014][ T8100] ? __mutex_lock+0x51b/0xe80 [ 158.589036][ T8100] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 158.589049][ T8100] ? rtnl_newlink+0x8db/0x1c70 [ 158.589072][ T8100] ? __pfx___mutex_lock+0x10/0x10 [ 158.589098][ T8100] ? ns_capable+0x8a/0xf0 [ 158.589114][ T8100] rtnl_newlink+0x16d6/0x1c70 [ 158.589136][ T8100] ? __kasan_slab_free+0x62/0x70 [ 158.589162][ T8100] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.589237][ T8100] ? aa_get_newest_label+0xf7/0x5d0 [ 158.589254][ T8100] ? __lock_acquire+0xaac/0xd20 [ 158.589292][ T8100] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.589312][ T8100] rtnetlink_rcv_msg+0x7cc/0xb70 [ 158.589336][ T8100] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 158.589357][ T8100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.589382][ T8100] ? ref_tracker_free+0x63a/0x7d0 [ 158.589395][ T8100] ? __copy_skb_header+0xa7/0x550 [ 158.589418][ T8100] netlink_rcv_skb+0x219/0x490 [ 158.589441][ T8100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.589470][ T8100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.589506][ T8100] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.589528][ T8100] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.589554][ T8100] netlink_unicast+0x758/0x8d0 [ 158.589583][ T8100] netlink_sendmsg+0x805/0xb30 [ 158.589603][ T8100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.589619][ T8100] ? aa_sock_msg_perm+0x94/0x160 [ 158.589635][ T8100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.589651][ T8100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.589665][ T8100] __sock_sendmsg+0x219/0x270 [ 158.589688][ T8100] ____sys_sendmsg+0x505/0x830 [ 158.589708][ T8100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.589730][ T8100] ? import_iovec+0x74/0xa0 [ 158.589751][ T8100] ___sys_sendmsg+0x21f/0x2a0 [ 158.589769][ T8100] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.589812][ T8100] ? __fget_files+0x2a/0x420 [ 158.589829][ T8100] ? __fget_files+0x3a0/0x420 [ 158.589856][ T8100] __x64_sys_sendmsg+0x19b/0x260 [ 158.589873][ T8100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.589902][ T8100] ? do_syscall_64+0xba/0x210 [ 158.589924][ T8100] do_syscall_64+0xf6/0x210 [ 158.589943][ T8100] ? clear_bhb_loop+0x45/0xa0 [ 158.589961][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.589975][ T8100] RIP: 0033:0x7fb20af8e969 [ 158.589992][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.590004][ T8100] RSP: 002b:00007fb20be62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.590018][ T8100] RAX: ffffffffffffffda RBX: 00007fb20b1b5fa0 RCX: 00007fb20af8e969 [ 158.590029][ T8100] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 000000000000000d [ 158.590037][ T8100] RBP: 00007fb20b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.590046][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.590054][ T8100] R13: 0000000000000000 R14: 00007fb20b1b5fa0 R15: 00007fffe6b80038 [ 158.590076][ T8100] [ 158.590084][ T8100] Mem-Info: [ 159.077396][ T8100] active_anon:4132 inactive_anon:0 isolated_anon:0 [ 159.077396][ T8100] active_file:1348 inactive_file:38341 isolated_file:0 [ 159.077396][ T8100] unevictable:769 dirty:69 writeback:0 [ 159.077396][ T8100] slab_reclaimable:10224 slab_unreclaimable:110169 [ 159.077396][ T8100] mapped:29436 shmem:1405 pagetables:782 [ 159.077396][ T8100] sec_pagetables:0 bounce:0 [ 159.077396][ T8100] kernel_misc_reclaimable:0 [ 159.077396][ T8100] free:1330581 free_pcp:427 free_cma:0 [ 159.127177][ T8100] Node 0 active_anon:16528kB inactive_anon:0kB active_file:5392kB inactive_file:153288kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:117744kB dirty:272kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11184kB pagetables:3128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.160782][ T8100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.193720][ T8100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.221519][ T8100] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 159.227471][ T8100] Node 0 DMA32 free:1395464kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:16520kB inactive_anon:0kB active_file:5392kB inactive_file:153196kB unevictable:1540kB writepending:268kB present:3129332kB managed:2564132kB mlocked:4kB bounce:0kB free_pcp:164kB local_pcp:68kB free_cma:0kB [ 159.257816][ T8100] lowmem_reserve[]: 0 0 0 0 0 [ 159.262577][ T8100] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 159.289864][ T8100] lowmem_reserve[]: 0 0 0 0 0 [ 159.294971][ T8100] Node 1 Normal free:3914288kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.329739][ T8100] lowmem_reserve[]: 0 0 0 0 0 [ 159.334480][ T8100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.347742][ T8100] Node 0 DMA32: 212*4kB (UME) 268*8kB (UME) 130*16kB (UM) 130*32kB (UME) 62*64kB (UME) 34*128kB (UME) 53*256kB (UM) 57*512kB (UME) 34*1024kB (UM) 13*2048kB (UME) 311*4096kB (M) = 1395600kB [ 159.366729][ T8100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.378518][ T8100] Node 1 Normal: 238*4kB (UME) 59*8kB (UME) 42*16kB (UME) 190*32kB (UME) 103*64kB (UME) 33*128kB (UME) 20*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3914288kB [ 159.399145][ T8100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.409147][ T8100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.418579][ T8100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.428658][ T8100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.438118][ T8100] 41095 total pagecache pages [ 159.443087][ T8100] 0 pages in swap cache [ 159.447373][ T8100] Free swap = 124996kB [ 159.451697][ T8100] Total swap = 124996kB [ 159.455883][ T8100] 2097051 pages RAM [ 159.459909][ T8100] 0 pages HighMem/MovableOnly [ 159.464577][ T8100] 424360 pages reserved [ 159.468793][ T8100] 0 pages cma reserved [ 160.799057][ T3497] dummy0: left promiscuous mode [ 160.875153][ T7836] veth0_vlan: entered promiscuous mode [ 160.917345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.009581][ T7836] veth1_vlan: entered promiscuous mode [ 161.129081][ T8139] __nla_validate_parse: 6 callbacks suppressed [ 161.129102][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 161.158020][ T8135] lo speed is unknown, defaulting to 1000 [ 161.161398][ T7836] veth0_macvtap: entered promiscuous mode [ 161.243681][ T7836] veth1_macvtap: entered promiscuous mode [ 161.380544][ T8152] validate_nla: 1 callbacks suppressed [ 161.380563][ T8152] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 161.401107][ T8152] netlink: 224 bytes leftover after parsing attributes in process `syz.4.560'. [ 161.431518][ T8152] netlink: 'syz.4.560': attribute type 11 has an invalid length. [ 161.433354][ T8153] netlink: 'syz.4.560': attribute type 11 has an invalid length. [ 161.519246][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.531447][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.542668][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.553714][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.572399][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.602114][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 161.691968][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.731656][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.742551][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.761323][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.774046][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.880673][ T8165] netlink: 'syz.0.564': attribute type 6 has an invalid length. [ 161.888710][ T8165] netlink: 'syz.0.564': attribute type 7 has an invalid length. [ 161.897251][ T8165] netlink: 'syz.0.564': attribute type 8 has an invalid length. [ 161.919544][ T7836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.929318][ T7836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.944099][ T7836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.955546][ T7836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.956315][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 161.997942][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 162.009638][ T8176] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 162.017657][ T8176] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 162.025447][ T8176] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 162.033816][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 162.076605][ T8176] team0: No ports can be present during mode change [ 162.218609][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.241325][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.323625][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.358380][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.430257][ T8189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 162.502045][ T8193] bond4: entered promiscuous mode [ 162.518222][ T8193] bond4: entered allmulticast mode [ 162.546726][ T8193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.793157][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 162.807206][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 162.869299][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 163.603336][ T1323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.037200][ T1323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.278430][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 164.559656][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.572156][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.581739][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.592514][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.605833][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.617431][ T8225] netlink: 100 bytes leftover after parsing attributes in process `syz.0.585'. [ 164.778081][ T1323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.901390][ T8252] lo speed is unknown, defaulting to 1000 [ 164.953661][ T1323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.243733][ T8275] tc_dump_action: action bad kind [ 165.372646][ T8277] syzkaller0: entered promiscuous mode [ 165.381161][ T8277] syzkaller0: entered allmulticast mode [ 166.676303][ T5852] Bluetooth: hci1: command tx timeout [ 166.759807][ T1323] bridge_slave_1: left allmulticast mode [ 166.783094][ T1323] bridge_slave_1: left promiscuous mode [ 166.792868][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.822651][ T1323] bridge_slave_0: left allmulticast mode [ 166.832565][ T1323] bridge_slave_0: left promiscuous mode [ 166.850381][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.221603][ T1323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.233027][ T1323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.243592][ T1323] bond0 (unregistering): Released all slaves [ 167.265284][ T8290] __nla_validate_parse: 3 callbacks suppressed [ 167.265299][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 167.298454][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 167.476904][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 167.493123][ T8307] netlink: 52 bytes leftover after parsing attributes in process `syz.4.606'. [ 167.921145][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.956184][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.964621][ T8252] bridge_slave_0: entered allmulticast mode [ 167.992893][ T8252] bridge_slave_0: entered promiscuous mode [ 168.043342][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.063566][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.081254][ T8252] bridge_slave_1: entered allmulticast mode [ 168.109012][ T8252] bridge_slave_1: entered promiscuous mode [ 168.110494][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 168.186458][ T1323] hsr_slave_0: left promiscuous mode [ 168.193597][ T1323] hsr_slave_1: left promiscuous mode [ 168.209249][ T1323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.216817][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.227282][ T1323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.239309][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.311953][ T1323] veth1_macvtap: left promiscuous mode [ 168.343144][ T1323] veth0_macvtap: left promiscuous mode [ 168.364477][ T1323] veth1_vlan: left promiscuous mode [ 168.407717][ T1323] veth0_vlan: left promiscuous mode [ 168.762617][ T5852] Bluetooth: hci1: command tx timeout [ 169.303851][ T1323] team0 (unregistering): Port device team_slave_1 removed [ 169.347415][ T1323] team0 (unregistering): Port device team_slave_0 removed [ 169.715547][ T8366] netlink: 'syz.4.618': attribute type 2 has an invalid length. [ 169.772588][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.804357][ T8353] lo speed is unknown, defaulting to 1000 [ 169.812991][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.968899][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.057041][ T8252] team0: Port device team_slave_0 added [ 170.077765][ T8252] team0: Port device team_slave_1 added [ 170.184082][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.211546][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.239392][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.381814][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 170.403714][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.416007][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.449056][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.531899][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 170.849952][ T5852] Bluetooth: hci1: command tx timeout [ 170.861812][ T8252] hsr_slave_0: entered promiscuous mode [ 170.879182][ T8252] hsr_slave_1: entered promiscuous mode [ 170.893885][ T8252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.915869][ T8252] Cannot create hsr debugfs directory [ 171.786629][ T8432] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'. [ 171.797304][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 172.048110][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 172.410606][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 172.453420][ T8252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.476263][ T8252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.504487][ T8252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.531127][ T8252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.792500][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.850093][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.894602][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.901885][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.925256][ T5852] Bluetooth: hci1: command tx timeout [ 172.943301][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.950526][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.059662][ T8252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.073160][ T8252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.130669][ T8496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.169300][ T5890] lo speed is unknown, defaulting to 1000 [ 173.355603][ T8504] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 173.547872][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.689141][ T8252] veth0_vlan: entered promiscuous mode [ 173.722937][ T8252] veth1_vlan: entered promiscuous mode [ 173.745498][ T8531] lo speed is unknown, defaulting to 1000 [ 173.910936][ T8252] veth0_macvtap: entered promiscuous mode [ 173.971828][ T8252] veth1_macvtap: entered promiscuous mode [ 174.192342][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 174.213632][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 174.230856][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 174.289288][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.321988][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.364189][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.374903][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.386739][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.413500][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.425191][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.435473][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.448168][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.463092][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.501210][ T8252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.515419][ T8252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.529074][ T8252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.539438][ T8252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.580137][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 174.690981][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 174.922119][ T8586] Cannot find add_set index 0 as target [ 174.934403][ T8588] Cannot find add_set index 0 as target [ 175.064023][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.102521][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.203526][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.223332][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.323161][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 175.363313][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 175.432060][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 175.447796][ T8612] netlink: 'syz.0.687': attribute type 2 has an invalid length. [ 175.481490][ T8619] sctp: [Deprecated]: syz.2.685 (pid 8619) Use of int in max_burst socket option. [ 175.481490][ T8619] Use struct sctp_assoc_value instead [ 176.083753][ T8629] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 176.083756][ T8619] IPVS: stopping backup sync thread 8629 ... [ 176.107648][ T8622] ip6gre1: entered promiscuous mode [ 176.171225][ T8609] lo speed is unknown, defaulting to 1000 [ 176.177576][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.215434][ T8624] lo speed is unknown, defaulting to 1000 [ 176.246504][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.706299][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.736208][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.212046][ T8640] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 177.224760][ T8640] netlink: 208 bytes leftover after parsing attributes in process `syz.0.692'. [ 177.234627][ T8640] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 177.429411][ T8644] __nla_validate_parse: 1 callbacks suppressed [ 177.429433][ T8644] netlink: 2 bytes leftover after parsing attributes in process `syz.2.693'. [ 177.464135][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.475261][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.486667][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.498791][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.510116][ T8644] batadv_slave_1: entered promiscuous mode [ 177.873109][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 177.908221][ T1342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.036562][ T1342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.095476][ T1342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.171577][ T1342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.272902][ T1342] bridge_slave_1: left allmulticast mode [ 178.279285][ T1342] bridge_slave_1: left promiscuous mode [ 178.285032][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.294733][ T1342] bridge_slave_0: left allmulticast mode [ 178.300966][ T1342] bridge_slave_0: left promiscuous mode [ 178.306857][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.499619][ T8666] netlink: 148 bytes leftover after parsing attributes in process `syz.0.699'. [ 178.836802][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.853304][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.865200][ T1342] bond0 (unregistering): Released all slaves [ 178.904521][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.922518][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.933612][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.942520][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.970092][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.012528][ T8668] lo speed is unknown, defaulting to 1000 [ 179.132108][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 179.335083][ T8680] lo speed is unknown, defaulting to 1000 [ 179.652399][ T1342] hsr_slave_0: left promiscuous mode [ 179.666798][ T1342] hsr_slave_1: left promiscuous mode [ 179.673015][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.680936][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.690805][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.701701][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.734349][ T1342] veth1_macvtap: left promiscuous mode [ 179.740117][ T1342] veth0_macvtap: left promiscuous mode [ 179.745810][ T1342] veth1_vlan: left promiscuous mode [ 179.752606][ T1342] veth0_vlan: left promiscuous mode [ 179.930276][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 180.247789][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 180.285657][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 180.687001][ T8714] sit0: entered promiscuous mode [ 180.718460][ T8714] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 180.738432][ T8714] netlink: 1 bytes leftover after parsing attributes in process `syz.2.712'. [ 180.837843][ T8722] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 180.886327][ T8722] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 180.912863][ T8722] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.052864][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 181.077050][ T5847] Bluetooth: hci1: command tx timeout [ 181.203883][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 181.231224][ T8742] veth1_to_bridge: entered promiscuous mode [ 181.241210][ T8742] vlan2: entered promiscuous mode [ 181.354364][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 181.361964][ T8741] vlan2: entered promiscuous mode [ 181.365499][ T8754] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 181.386868][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 181.648612][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.942550][ T8786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.730'. [ 182.021552][ T8787] IPv6: sit1: Disabled Multicast RS [ 182.060003][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.083792][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.100519][ T8680] bridge_slave_0: entered allmulticast mode [ 182.113641][ T8680] bridge_slave_0: entered promiscuous mode [ 182.120321][ T8794] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.131424][ T8794] IPv6: Can't replace route, no match found [ 182.177752][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.185542][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.194081][ T8680] bridge_slave_1: entered allmulticast mode [ 182.223017][ T8680] bridge_slave_1: entered promiscuous mode [ 182.362873][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.378932][ T8805] No such timeout policy "syz1" [ 182.394273][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.568496][ T8680] team0: Port device team_slave_0 added [ 182.571080][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 182.596776][ T8680] team0: Port device team_slave_1 added [ 182.602456][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 182.690057][ T8822] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.744109][ T8824] netlink: 'syz.4.744': attribute type 11 has an invalid length. [ 182.764159][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.790774][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.834170][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.856352][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.863335][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.893965][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.952907][ T8680] hsr_slave_0: entered promiscuous mode [ 182.959583][ T8680] hsr_slave_1: entered promiscuous mode [ 182.965866][ T8680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.973574][ T8680] Cannot create hsr debugfs directory [ 183.167088][ T5847] Bluetooth: hci1: command tx timeout [ 183.185266][ T8830] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 183.551013][ T8843] netlink: 140 bytes leftover after parsing attributes in process `syz.0.749'. [ 183.581211][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 183.590441][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 183.698723][ T8846] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.751'. [ 183.869479][ T8680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.894007][ T8680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.920435][ T8680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.958465][ T8680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.974127][ T8859] lo speed is unknown, defaulting to 1000 [ 184.035714][ T8863] lo speed is unknown, defaulting to 1000 [ 184.598724][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.663021][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.680705][ T8895] nbd: couldn't find a device at index 135 [ 184.720007][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.727249][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.755259][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.762449][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.236250][ T5847] Bluetooth: hci1: command tx timeout [ 185.312973][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.457517][ T8680] veth0_vlan: entered promiscuous mode [ 185.492737][ T8920] lo speed is unknown, defaulting to 1000 [ 185.574304][ T8680] veth1_vlan: entered promiscuous mode [ 185.697870][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 185.840823][ T8680] veth0_macvtap: entered promiscuous mode [ 185.853073][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.861479][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.871284][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.881372][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.893211][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.893628][ T8680] veth1_macvtap: entered promiscuous mode [ 186.108773][ T8680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.141495][ T8680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.153942][ T8680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.167591][ T8680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.180092][ T8950] netlink: 'syz.4.778': attribute type 4 has an invalid length. [ 186.190542][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.200680][ T8935] lo speed is unknown, defaulting to 1000 [ 186.254765][ T8680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.269860][ T8680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.280630][ T8680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.292284][ T8680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.317384][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.337856][ T8680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.356851][ T8680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.365595][ T8680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.384264][ T8680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.413299][ T5890] lo speed is unknown, defaulting to 1000 [ 186.423044][ T5890] syz2: Port: 1 Link DOWN [ 186.480633][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 186.494929][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 186.530255][ T8954] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.539092][ T8954] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.548013][ T8954] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.556846][ T8954] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.659582][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.696034][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.893994][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.782'. [ 186.932758][ T8966] bridge0: entered promiscuous mode [ 186.966791][ T8966] syz_tun: entered promiscuous mode [ 186.986199][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.994085][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.019917][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 187.184956][ T8979] netlink: 'syz.2.786': attribute type 20 has an invalid length. [ 187.204704][ T8979] netlink: 'syz.2.786': attribute type 21 has an invalid length. [ 187.395561][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.409784][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.419967][ T8935] bridge_slave_0: entered allmulticast mode [ 187.431258][ T8935] bridge_slave_0: entered promiscuous mode [ 187.459393][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.476414][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.491455][ T8935] bridge_slave_1: entered allmulticast mode [ 187.505852][ T8935] bridge_slave_1: entered promiscuous mode [ 187.552107][ T8990] team0: Device gtp0 is of different type [ 187.605433][ T8993] __nla_validate_parse: 2 callbacks suppressed [ 187.605449][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 187.613097][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.635168][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.712711][ T8935] team0: Port device team_slave_0 added [ 187.744552][ T8935] team0: Port device team_slave_1 added [ 187.788709][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.795696][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.826027][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.842197][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.849715][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.879119][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.929603][ T8935] hsr_slave_0: entered promiscuous mode [ 187.936573][ T8935] hsr_slave_1: entered promiscuous mode [ 187.942985][ T8935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.950633][ T8935] Cannot create hsr debugfs directory [ 187.966085][ T5847] Bluetooth: hci2: command tx timeout [ 188.078035][ T9003] nbd: socks must be embedded in a SOCK_ITEM attr [ 188.231909][ T1342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.414991][ T1342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.493582][ T1342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.553405][ T1342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.681661][ T8935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.693809][ T8935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.704382][ T8935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.724607][ T8935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.761972][ T1342] bridge_slave_1: left allmulticast mode [ 188.769137][ T1342] bridge_slave_1: left promiscuous mode [ 188.774854][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.787522][ T1342] bridge_slave_0: left allmulticast mode [ 188.793269][ T1342] bridge_slave_0: left promiscuous mode [ 188.799740][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.997316][ T9010] --map-set only usable from mangle table [ 189.356898][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.381902][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.398262][ T1342] bond0 (unregistering): Released all slaves [ 189.418457][ T9021] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 189.502503][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.521987][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.532270][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.551691][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.561645][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.696320][ T9021] lo speed is unknown, defaulting to 1000 [ 189.905705][ T9036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.916606][ T9036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.965854][ T9022] lo speed is unknown, defaulting to 1000 [ 190.036083][ T5146] Bluetooth: hci2: command tx timeout [ 190.051752][ T9036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.062767][ T9036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.108309][ T1342] hsr_slave_0: left promiscuous mode [ 190.128924][ T1342] hsr_slave_1: left promiscuous mode [ 190.134852][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.150856][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.161012][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.170456][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.191944][ T1342] veth1_macvtap: left promiscuous mode [ 190.199217][ T1342] veth0_macvtap: left promiscuous mode [ 190.204886][ T1342] veth1_vlan: left promiscuous mode [ 190.212788][ T1342] veth0_vlan: left promiscuous mode [ 190.628350][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 190.672095][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 191.085133][ T9036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.095758][ T9036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.227825][ T9036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.259788][ T9036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.272921][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 191.370632][ T9055] netlink: 256 bytes leftover after parsing attributes in process `syz.1.806'. [ 191.437113][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.807'. [ 191.504702][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.551427][ T9036] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.576121][ T9036] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.636588][ T5146] Bluetooth: hci1: command tx timeout [ 191.696599][ T9036] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.704933][ T9036] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.726305][ T9036] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.734654][ T9036] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.768399][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.804056][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 191.858587][ T9036] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.898799][ T9036] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.916590][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.924669][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.051618][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.058846][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.116868][ T5146] Bluetooth: hci2: command 0x040f tx timeout [ 192.290324][ T9088] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 192.323217][ T9084] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.814'. [ 192.332731][ T9084] netlink: zone id is out of range [ 192.338127][ T9084] netlink: zone id is out of range [ 192.343339][ T9084] netlink: zone id is out of range [ 192.348553][ T9084] netlink: zone id is out of range [ 192.353785][ T9084] netlink: zone id is out of range [ 192.360046][ T9084] netlink: zone id is out of range [ 192.373630][ T9084] netlink: zone id is out of range [ 192.391696][ T9084] netlink: zone id is out of range [ 192.397177][ T9084] netlink: zone id is out of range [ 192.402375][ T9084] netlink: zone id is out of range [ 192.506945][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.525282][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.534999][ T9022] bridge_slave_0: entered allmulticast mode [ 192.593341][ T9022] bridge_slave_0: entered promiscuous mode [ 192.736676][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.777711][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.792714][ T9022] bridge_slave_1: entered allmulticast mode [ 192.801831][ T9022] bridge_slave_1: entered promiscuous mode [ 192.861812][ T9101] netlink: 'syz.1.818': attribute type 2 has an invalid length. [ 192.931472][ T9101] €: entered promiscuous mode [ 192.972817][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.021366][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.131221][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 193.150364][ T9022] team0: Port device team_slave_0 added [ 193.193574][ T9022] team0: Port device team_slave_1 added [ 193.387186][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.394235][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.452251][ T9022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.452387][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 193.465555][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.496217][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.522412][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.824'. [ 193.556022][ T9022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.720233][ T5847] Bluetooth: hci1: command tx timeout [ 193.730987][ T9116] syzkaller0: entered promiscuous mode [ 193.819740][ T9022] hsr_slave_0: entered promiscuous mode [ 193.827899][ T9022] hsr_slave_1: entered promiscuous mode [ 193.834201][ T9022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.842030][ T9022] Cannot create hsr debugfs directory [ 194.033455][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.196600][ T5847] Bluetooth: hci2: command 0x040f tx timeout [ 194.202181][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209390][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454772][ T9160] C: renamed from team_slave_0 [ 194.482205][ T9160] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 194.530546][ T9164] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 194.682856][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'. [ 194.705232][ T8935] veth0_vlan: entered promiscuous mode [ 194.740619][ T8935] veth1_vlan: entered promiscuous mode [ 194.821339][ T8935] veth0_macvtap: entered promiscuous mode [ 194.862812][ T8935] veth1_macvtap: entered promiscuous mode [ 194.981373][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.048148][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.059097][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.079859][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.094468][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.115300][ T9181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.133351][ T9181] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 195.137547][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.160699][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.174700][ T8935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.185299][ T8935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.197822][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.250314][ T9181] bond1: entered promiscuous mode [ 195.261497][ T9181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.270450][ T9188] xt_TCPMSS: Only works on TCP SYN packets [ 195.319674][ T9183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.341240][ T9183] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 195.352111][ T9183] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 195.373849][ T9183] bond1: (slave ip6gre1): making interface the new active one [ 195.383917][ T9183] ip6gre1: entered promiscuous mode [ 195.397858][ T9183] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 195.417693][ T8935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.426765][ T8935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.436967][ T8935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.445716][ T8935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.458377][ T9022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.478208][ T9022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.580995][ T9022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.595458][ T9022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.732145][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.750180][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.789800][ T9196] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 195.797486][ T5847] Bluetooth: hci1: command tx timeout [ 195.804811][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.820976][ T9196] netlink: 224 bytes leftover after parsing attributes in process `syz.2.844'. [ 195.832220][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.903405][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.930258][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.968996][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.976234][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.021109][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.028388][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.282691][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.328311][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.442732][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.475011][ T9022] veth0_vlan: entered promiscuous mode [ 196.495720][ T9022] veth1_vlan: entered promiscuous mode [ 196.614142][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.792890][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.925955][ T9022] veth0_macvtap: entered promiscuous mode [ 196.982698][ T9022] veth1_macvtap: entered promiscuous mode [ 197.008277][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 197.088737][ T9226] bridge0: entered promiscuous mode [ 197.104674][ T9226] macvtap1: entered promiscuous mode [ 197.110404][ T9226] macvtap1: entered allmulticast mode [ 197.124411][ T9226] bridge0: entered allmulticast mode [ 197.152245][ T9229] sctp: [Deprecated]: syz.4.851 (pid 9229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.152245][ T9229] Use struct sctp_sack_info instead [ 197.182688][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.219359][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.256200][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.280426][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.300372][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.318555][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.344553][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.424182][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.433239][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.442291][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.458205][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.469902][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.500866][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.514510][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.526711][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.537323][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.547475][ T9022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.558894][ T9022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.570423][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.583018][ T9022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.595099][ T9022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.603889][ T9022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.612785][ T9022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.696585][ T36] bridge_slave_1: left allmulticast mode [ 197.702299][ T36] bridge_slave_1: left promiscuous mode [ 197.722162][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.744507][ T36] bridge_slave_0: left allmulticast mode [ 197.761096][ T36] bridge_slave_0: left promiscuous mode [ 197.773656][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.793290][ T9243] netlink: 'syz.2.854': attribute type 2 has an invalid length. [ 197.804341][ T9243] netlink: 'syz.2.854': attribute type 2 has an invalid length. [ 197.815219][ T9243] netlink: 'syz.2.854': attribute type 2 has an invalid length. [ 197.877996][ T5146] Bluetooth: hci1: command tx timeout [ 197.907333][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 197.922535][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 198.200776][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.211957][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.223970][ T36] bond0 (unregistering): Released all slaves [ 198.330496][ T9237] lo speed is unknown, defaulting to 1000 [ 198.413065][ T9266] netlink: 'syz.2.860': attribute type 13 has an invalid length. [ 198.439230][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.450169][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.603576][ T9266] gretap0: refused to change device tx_queue_len [ 198.626139][ T9266] net_ratelimit: 12 callbacks suppressed [ 198.626160][ T9266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.737169][ T9273] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 198.807461][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.836573][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.882203][ T36] hsr_slave_0: left promiscuous mode [ 198.898850][ T36] hsr_slave_1: left promiscuous mode [ 198.904785][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.929049][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.947926][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.959043][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.020687][ T36] veth1_macvtap: left promiscuous mode [ 199.036483][ T36] veth0_macvtap: left promiscuous mode [ 199.042208][ T36] veth1_vlan: left promiscuous mode [ 199.055638][ T36] veth0_vlan: left promiscuous mode [ 199.556565][ T5146] Bluetooth: hci2: command tx timeout [ 199.803972][ T9304] sctp: [Deprecated]: syz.1.870 (pid 9304) Use of int in maxseg socket option. [ 199.803972][ T9304] Use struct sctp_assoc_value instead [ 199.875486][ T36] team0 (unregistering): Port device team_slave_1 removed [ 199.917715][ T36] team0 (unregistering): Port device team_slave_0 removed [ 200.374275][ T9302] lo: entered allmulticast mode [ 200.401131][ T9302] tunl0: entered allmulticast mode [ 200.432717][ T9302] gre0: entered allmulticast mode [ 200.502320][ T9302] gretap0: entered allmulticast mode [ 200.508206][ T9307] nbd: socks must be embedded in a SOCK_ITEM attr [ 200.611931][ T9307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.871'. [ 200.635378][ T9302] erspan0: entered allmulticast mode [ 200.664958][ T9302] ip_vti0: entered allmulticast mode [ 200.690771][ T9302] ip6_vti0: entered allmulticast mode [ 200.713073][ T9302] sit0: entered allmulticast mode [ 200.726529][ T9302] ip6tnl0: entered allmulticast mode [ 200.742927][ T9302] ip6gre0: entered allmulticast mode [ 200.796776][ T9302] syz_tun: entered allmulticast mode [ 200.880919][ T9302] ip6gretap0: entered allmulticast mode [ 201.212755][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 201.221871][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 201.235410][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 201.244961][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 201.350591][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 201.422903][ T9324] lo speed is unknown, defaulting to 1000 [ 201.424314][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 201.638787][ T5146] Bluetooth: hci2: command tx timeout [ 201.736226][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.743571][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.751333][ T9237] bridge_slave_0: entered allmulticast mode [ 201.759353][ T9237] bridge_slave_0: entered promiscuous mode [ 201.780839][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.792559][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.806224][ T9237] bridge_slave_1: entered allmulticast mode [ 201.814061][ T9237] bridge_slave_1: entered promiscuous mode [ 201.858343][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.870157][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.923152][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.958414][ T9237] team0: Port device team_slave_0 added [ 201.967807][ T9237] team0: Port device team_slave_1 added [ 202.005814][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.039846][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.047207][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.073358][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.086423][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.094213][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.121546][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.150817][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.205498][ T9237] hsr_slave_0: entered promiscuous mode [ 202.212253][ T9237] hsr_slave_1: entered promiscuous mode [ 202.219100][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.226858][ T9237] Cannot create hsr debugfs directory [ 202.404809][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.539440][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 202.605623][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.612911][ T9353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.677139][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.848983][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 202.875962][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 202.944951][ T9360] lo speed is unknown, defaulting to 1000 [ 202.951234][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 203.131065][ T9367] bridge1: entered promiscuous mode [ 203.137036][ T9367] bridge1: entered allmulticast mode [ 203.141269][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.158555][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.168228][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.176644][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.178672][ T36] bridge_slave_1: left allmulticast mode [ 203.184852][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.197279][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.205842][ T36] bridge_slave_1: left promiscuous mode [ 203.214303][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.233131][ T36] bridge_slave_0: left allmulticast mode [ 203.240447][ T36] bridge_slave_0: left promiscuous mode [ 203.247410][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.681999][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.695022][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.706855][ T36] bond0 (unregistering): Released all slaves [ 203.717219][ T5146] Bluetooth: hci2: command tx timeout [ 203.763395][ T9379] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 204.033922][ T9386] netlink: 'syz.1.891': attribute type 20 has an invalid length. [ 204.048846][ T9385] netlink: 'syz.1.891': attribute type 20 has an invalid length. [ 204.072522][ T9374] lo speed is unknown, defaulting to 1000 [ 204.104941][ T9385] wg1 speed is unknown, defaulting to 1000 [ 204.136198][ T9385] wg1 speed is unknown, defaulting to 1000 [ 204.174246][ T9385] wg1 speed is unknown, defaulting to 1000 [ 204.218653][ T36] hsr_slave_0: left promiscuous mode [ 204.219203][ T9385] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -1 [ 204.231507][ T36] hsr_slave_1: left promiscuous mode [ 204.238294][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.246373][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.261248][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.268796][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.291178][ T36] veth1_macvtap: left promiscuous mode [ 204.296937][ T36] veth0_macvtap: left promiscuous mode [ 204.302609][ T36] veth1_vlan: left promiscuous mode [ 204.308036][ T36] veth0_vlan: left promiscuous mode [ 204.768016][ T36] team0 (unregistering): Port device team_slave_1 removed [ 204.808378][ T36] team0 (unregistering): Port device team_slave_0 removed [ 205.193567][ T9390] tipc: Enabling of bearer rejected, failed to enable media [ 205.216338][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.236226][ T5146] Bluetooth: hci1: command tx timeout [ 205.249132][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.294619][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.392355][ T9399] x_tables: duplicate underflow at hook 2 [ 205.401849][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.478458][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.534985][ T9385] wg1 speed is unknown, defaulting to 1000 [ 205.535176][ T9374] chnl_net:caif_netlink_parms(): no params data found [ 205.647797][ T9237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.753345][ T9237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.779369][ T9410] __nla_validate_parse: 1 callbacks suppressed [ 205.779389][ T9410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.898'. [ 205.797366][ T5146] Bluetooth: hci2: command tx timeout [ 205.805273][ T9237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.841872][ T9237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.125535][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.146377][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.153700][ T9374] bridge_slave_0: entered allmulticast mode [ 206.188268][ T9374] bridge_slave_0: entered promiscuous mode [ 206.217819][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.225076][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.246224][ T9374] bridge_slave_1: entered allmulticast mode [ 206.264414][ T9374] bridge_slave_1: entered promiscuous mode [ 206.270844][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 206.374232][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.384389][ T9421] netlink: 228 bytes leftover after parsing attributes in process `syz.4.901'. [ 206.409763][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.419014][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 206.461215][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.477910][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.557102][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.569068][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.584560][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.593526][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.602976][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.624679][ T9374] team0: Port device team_slave_0 added [ 206.641893][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.654317][ T9428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.903'. [ 206.671630][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.699962][ T9374] team0: Port device team_slave_1 added [ 206.765694][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.800815][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.885879][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.900429][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.978625][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.997792][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.005608][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.071720][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.101791][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.117692][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.190997][ T9424] lo speed is unknown, defaulting to 1000 [ 207.242170][ T9424] wg1 speed is unknown, defaulting to 1000 [ 207.307359][ T9374] hsr_slave_0: entered promiscuous mode [ 207.314248][ T9374] hsr_slave_1: entered promiscuous mode [ 207.319941][ T5847] Bluetooth: hci1: command tx timeout [ 207.330008][ T9374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.338280][ T9374] Cannot create hsr debugfs directory [ 207.479322][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 207.506976][ T9459] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 207.525530][ T5887] wg1 speed is unknown, defaulting to 1000 [ 207.531661][ T5887] syz0: Port: 1 Link DOWN [ 207.653317][ T9461] bond2: (slave gretap1): making interface the new active one [ 207.669144][ T9461] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 207.868090][ T36] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 207.876766][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 207.885597][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 207.895865][ T36] ip6gre1 (unregistering): left promiscuous mode [ 208.368022][ T36]  (unregistering): Released all slaves [ 208.467190][ T36] bond0 (unregistering): Released all slaves [ 208.566546][ T36] bond1 (unregistering): Released all slaves [ 208.676473][ T5847] Bluetooth: hci0: command tx timeout [ 208.739083][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.761573][ T36] €: left promiscuous mode [ 208.769179][ T9479] netlink: 88 bytes leftover after parsing attributes in process `syz.4.918'. [ 208.879290][ T36] tipc: Disabling bearer [ 208.893198][ T9474] lo speed is unknown, defaulting to 1000 [ 208.899906][ T36] tipc: Left network mode [ 208.943433][ T9474] wg1 speed is unknown, defaulting to 1000 [ 209.044540][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.192764][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.200006][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.213712][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 209.294200][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.301396][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.397346][ T5847] Bluetooth: hci1: command tx timeout [ 209.457240][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.480074][ T10] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 209.499306][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 209.520241][ T1342] wlan1: authenticated [ 209.522524][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.538592][ T3489] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 209.564882][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.583856][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.594463][ T9424] bridge_slave_0: entered allmulticast mode [ 209.623294][ T9424] bridge_slave_0: entered promiscuous mode [ 209.642625][ T36] hsr_slave_0: left promiscuous mode [ 209.650698][ T36] hsr_slave_1: left promiscuous mode [ 209.659223][ T164] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 209.659396][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.672226][ T164] wlan1: associated [ 209.709666][ T36] veth1_macvtap: left promiscuous mode [ 209.715562][ T36] veth1_vlan: left promiscuous mode [ 209.730537][ T36] veth0_vlan: left promiscuous mode [ 210.696267][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.703450][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.717808][ T9424] bridge_slave_1: entered allmulticast mode [ 210.725580][ T9424] bridge_slave_1: entered promiscuous mode [ 210.761222][ T5146] Bluetooth: hci0: command tx timeout [ 210.877263][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.903560][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.002219][ T9424] team0: Port device team_slave_0 added [ 211.025405][ T9374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.041042][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 211.058850][ T9374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.097639][ T9424] team0: Port device team_slave_1 added [ 211.198972][ T9374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.229707][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.254013][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.285817][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.310621][ T9374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.338948][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.356008][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.389344][ T9518] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.401275][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.476396][ T5146] Bluetooth: hci1: command tx timeout [ 211.636011][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 211.651816][ T9424] hsr_slave_0: entered promiscuous mode [ 211.663731][ T9424] hsr_slave_1: entered promiscuous mode [ 211.672284][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.680198][ T9424] Cannot create hsr debugfs directory [ 211.897248][ T9525] lo speed is unknown, defaulting to 1000 [ 212.020400][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.114091][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 212.149211][ T9529] netlink: 'syz.4.930': attribute type 3 has an invalid length. [ 212.375152][ T9534] bridge0: port 3(hsr0) entered blocking state [ 212.382377][ T9534] bridge0: port 3(hsr0) entered disabled state [ 212.388835][ T9534] hsr0: entered allmulticast mode [ 212.393960][ T9534] hsr_slave_0: entered allmulticast mode [ 212.399785][ T9534] hsr_slave_1: entered allmulticast mode [ 212.410078][ T9534] hsr0: entered promiscuous mode [ 212.418012][ T9534] bridge0: port 3(hsr0) entered blocking state [ 212.424490][ T9534] bridge0: port 3(hsr0) entered forwarding state [ 212.447464][ T9537] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 212.482661][ T9237] veth0_vlan: entered promiscuous mode [ 212.515479][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.580646][ T9237] veth1_vlan: entered promiscuous mode [ 212.672872][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.730897][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.738123][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.778531][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.936'. [ 212.793633][ T9237] veth0_macvtap: entered promiscuous mode [ 212.817722][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.824893][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.843560][ T5847] Bluetooth: hci0: command tx timeout [ 212.882684][ T9237] veth1_macvtap: entered promiscuous mode [ 213.019540][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.035011][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.047512][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.058052][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.069265][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.102863][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.114715][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.125529][ T9237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.137847][ T9237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.150138][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.165678][ T9374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.179435][ T9424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.205481][ T9237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.226093][ T9237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.234858][ T9237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.268306][ T9237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.312752][ T9424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.358249][ T9424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.425229][ T9424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.501578][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 213.625283][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.634928][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.648353][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.719344][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.736539][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.862449][ T9374] veth0_vlan: entered promiscuous mode [ 213.901301][ T9576] bridge0: entered promiscuous mode [ 213.910412][ T9576] macvlan2: entered promiscuous mode [ 213.917861][ T9576] bridge0: port 3(macvlan2) entered blocking state [ 213.924715][ T9576] bridge0: port 3(macvlan2) entered disabled state [ 213.937294][ T9576] macvlan2: entered allmulticast mode [ 213.947960][ T9576] bridge0: entered allmulticast mode [ 213.957460][ T9576] macvlan2: left allmulticast mode [ 213.963192][ T9576] bridge0: left allmulticast mode [ 213.966209][ T9577] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 213.970524][ T9576] bridge0: left promiscuous mode [ 213.984228][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.945'. [ 214.028921][ T9577] batadv0: entered promiscuous mode [ 214.034197][ T9577] batadv0: entered allmulticast mode [ 214.041406][ T9577] bridge0: port 3(batadv0) entered blocking state [ 214.048437][ T9577] bridge0: port 3(batadv0) entered disabled state [ 214.058110][ T9577] bridge0: port 3(batadv0) entered blocking state [ 214.064645][ T9577] bridge0: port 3(batadv0) entered forwarding state [ 214.082013][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.112386][ T9374] veth1_vlan: entered promiscuous mode [ 214.161032][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.213934][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.221185][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.260503][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.267723][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.358024][ T9583] netlink: 'syz.4.947': attribute type 4 has an invalid length. [ 214.358557][ T1342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.420744][ T9374] veth0_macvtap: entered promiscuous mode [ 214.500666][ T3497] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 214.510225][ T3497] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.550396][ T1342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.585519][ T9374] veth1_macvtap: entered promiscuous mode [ 214.709921][ T1342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.817031][ T1342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.915327][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.926622][ T5847] Bluetooth: hci0: command tx timeout [ 214.960566][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.976317][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.001610][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.022718][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.043413][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.055326][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.177970][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.213714][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.239460][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.240196][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.256019][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.262902][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.276662][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.280739][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.285478][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.294790][ T9374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.332992][ T9374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.348560][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.431227][ T9374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.440408][ T9374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.449333][ T9374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.459597][ T9374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.510100][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.535138][ T1342] bridge_slave_1: left allmulticast mode [ 215.540952][ T1342] bridge_slave_1: left promiscuous mode [ 215.548705][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.559147][ T1342] bridge_slave_0: left allmulticast mode [ 215.564821][ T1342] bridge_slave_0: left promiscuous mode [ 215.572316][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.869117][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 215.978097][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.989588][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.000160][ T1342] bond0 (unregistering): Released all slaves [ 216.016063][ T9598] lo speed is unknown, defaulting to 1000 [ 216.030351][ T9604] lo speed is unknown, defaulting to 1000 [ 216.266435][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.274319][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.449888][ T1342] hsr_slave_0: left promiscuous mode [ 216.459659][ T1342] hsr_slave_1: left promiscuous mode [ 216.467648][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.475159][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.484770][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.492370][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.519928][ T1342] veth1_macvtap: left promiscuous mode [ 216.525508][ T1342] veth0_macvtap: left promiscuous mode [ 216.531489][ T1342] veth1_vlan: left promiscuous mode [ 216.537334][ T1342] veth0_vlan: left promiscuous mode [ 216.973895][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 217.013226][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 217.236290][ C0] [ 217.238680][ C0] ============================================ [ 217.244850][ C0] WARNING: possible recursive locking detected [ 217.251020][ C0] 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 Not tainted [ 217.258117][ C0] -------------------------------------------- [ 217.264256][ C0] swapper/0/0 is trying to acquire lock: [ 217.269873][ C0] ffff88805ada0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 217.278917][ C0] [ 217.278917][ C0] but task is already holding lock: [ 217.286270][ C0] ffff8880329e2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 217.295325][ C0] [ 217.295325][ C0] other info that might help us debug this: [ 217.303399][ C0] Possible unsafe locking scenario: [ 217.303399][ C0] [ 217.310849][ C0] CPU0 [ 217.314124][ C0] ---- [ 217.317407][ C0] lock(&hsr->seqnr_lock); [ 217.321916][ C0] lock(&hsr->seqnr_lock); [ 217.326422][ C0] [ 217.326422][ C0] *** DEADLOCK *** [ 217.326422][ C0] [ 217.334563][ C0] May be due to missing lock nesting notation [ 217.334563][ C0] [ 217.342905][ C0] 9 locks held by swapper/0/0: [ 217.347667][ C0] #0: ffffc90000007be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 217.357268][ C0] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 217.366767][ C0] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 217.376609][ C0] #3: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 217.386539][ C0] #4: ffff8880329e2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 217.396039][ C0] #5: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 217.405571][ C0] #6: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 217.415509][ C0] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 217.424756][ C0] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 217.434716][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.434716][ C0] stack backtrace: [ 217.440625][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 217.440655][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.440669][ C0] Call Trace: [ 217.440679][ C0] [ 217.440687][ C0] dump_stack_lvl+0x189/0x250 [ 217.440715][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.440738][ C0] ? __pfx__printk+0x10/0x10 [ 217.440755][ C0] ? print_lock_name+0xde/0x100 [ 217.440782][ C0] print_deadlock_bug+0x28b/0x2a0 [ 217.440798][ C0] validate_chain+0x1a3f/0x2140 [ 217.440814][ C0] ? unwind_next_frame+0xa5/0x2390 [ 217.440836][ C0] ? unwind_next_frame+0xa5/0x2390 [ 217.440853][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 217.440873][ C0] ? __lock_acquire+0xaac/0xd20 [ 217.440897][ C0] __lock_acquire+0xaac/0xd20 [ 217.440920][ C0] ? hsr_dev_xmit+0x19a/0x220 [ 217.440935][ C0] lock_acquire+0x120/0x360 [ 217.440955][ C0] ? hsr_dev_xmit+0x19a/0x220 [ 217.440975][ C0] ? hsr_dev_xmit+0x19a/0x220 [ 217.440989][ C0] _raw_spin_lock_bh+0x36/0x50 [ 217.441006][ C0] ? hsr_dev_xmit+0x19a/0x220 [ 217.441021][ C0] hsr_dev_xmit+0x19a/0x220 [ 217.441037][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 217.441057][ C0] ? rcu_read_lock_bh_held+0x79/0xe0 [ 217.441078][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 217.441102][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 217.441124][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.441148][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.441168][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.441190][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 217.441209][ C0] ? ebt_do_table+0x265b/0x2820 [ 217.441238][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 217.441263][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 217.441286][ C0] ? NF_HOOK+0x9e/0x3c0 [ 217.441306][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 217.441338][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 217.441359][ C0] NF_HOOK+0x31d/0x3c0 [ 217.441380][ C0] ? NF_HOOK+0x9e/0x3c0 [ 217.441399][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 217.441421][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 217.441447][ C0] br_forward_finish+0xd3/0x130 [ 217.441467][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 217.441488][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 217.441508][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 217.441540][ C0] NF_HOOK+0x31d/0x3c0 [ 217.441559][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 217.441578][ C0] ? x86_64_start_kernel+0x66/0x70 [ 217.441595][ C0] ? NF_HOOK+0x9e/0x3c0 [ 217.441613][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 217.441634][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 217.441658][ C0] __br_forward+0x41e/0x600 [ 217.441676][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 217.441699][ C0] ? __pfx___br_forward+0x10/0x10 [ 217.441720][ C0] ? skb_clone+0x246/0x3a0 [ 217.441739][ C0] maybe_deliver+0xb5/0x160 [ 217.441761][ C0] br_flood+0x31a/0x6a0 [ 217.441794][ C0] ? br_dev_xmit+0x185/0x1840 [ 217.441807][ C0] br_dev_xmit+0x11b3/0x1840 [ 217.441821][ C0] ? arch_stack_walk+0x11c/0x150 [ 217.441839][ C0] ? br_dev_xmit+0x185/0x1840 [ 217.441856][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 217.441869][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 217.441887][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 217.441904][ C0] ? __lock_acquire+0xaac/0xd20 [ 217.441924][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 217.441946][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 217.441962][ C0] ? rcu_read_lock_bh_held+0x79/0xe0 [ 217.441981][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 217.442002][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 217.442021][ C0] ? rcu_is_watching+0x15/0xb0 [ 217.442042][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 217.442059][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 217.442077][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.442094][ C0] ? __copy_skb_header+0xa7/0x550 [ 217.442111][ C0] ? __asan_memcpy+0x40/0x70 [ 217.442124][ C0] ? __pskb_copy_fclone+0x960/0xf90 [ 217.442142][ C0] ? __asan_memcpy+0x40/0x70 [ 217.442155][ C0] ? __pskb_copy_fclone+0x960/0xf90 [ 217.442177][ C0] ? hsr_addr_subst_dest+0x307/0xac0 [ 217.442195][ C0] hsr_forward_skb+0x158b/0x2860 [ 217.442234][ C0] ? hsr_forward_skb+0x9e/0x2860 [ 217.442252][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 217.442269][ C0] ? do_raw_spin_lock+0x121/0x290 [ 217.442287][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.442313][ C0] ? hsr_dev_xmit+0x19a/0x220 [ 217.442343][ C0] hsr_dev_xmit+0x1a5/0x220 [ 217.442358][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 217.442375][ C0] ? rcu_read_lock_bh_held+0x79/0xe0 [ 217.442393][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 217.442414][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 217.442434][ C0] ? neigh_connected_output+0x1ea/0x460 [ 217.442456][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.442473][ C0] ? read_seqbegin+0x122/0x250 [ 217.442493][ C0] ? neigh_connected_output+0x1ea/0x460 [ 217.442513][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.442548][ C0] ? read_seqbegin+0x1ac/0x250 [ 217.442570][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 217.442592][ C0] ? eth_header+0x11b/0x200 [ 217.442608][ C0] ? __asan_memcpy+0x40/0x70 [ 217.442634][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 217.442652][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 217.442671][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 217.442691][ C0] ? ip6_mtu+0x7d/0x3f0 [ 217.442705][ C0] ? ip6_mtu+0x7d/0x3f0 [ 217.442719][ C0] ip6_finish_output+0x234/0x7d0 [ 217.442744][ C0] ndisc_send_skb+0xb47/0x1400 [ 217.442763][ C0] ? ndisc_send_skb+0x208/0x1400 [ 217.442794][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 217.442814][ C0] ? __pfx_dst_output+0x10/0x10 [ 217.442842][ C0] addrconf_rs_timer+0x369/0x670 [ 217.442862][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 217.442882][ C0] call_timer_fn+0x17b/0x5f0 [ 217.442902][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 217.442918][ C0] ? call_timer_fn+0xbe/0x5f0 [ 217.442937][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 217.442960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.442976][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.442993][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 217.443010][ C0] __run_timer_base+0x61a/0x860 [ 217.443028][ C0] ? ktime_get+0x3e/0x1f0 [ 217.443048][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 217.443065][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 217.443088][ C0] run_timer_softirq+0xb7/0x180 [ 217.443118][ C0] handle_softirqs+0x283/0x870 [ 217.443141][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 217.443155][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.443179][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 217.443197][ C0] __irq_exit_rcu+0xca/0x1f0 [ 217.443210][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 217.443226][ C0] irq_exit_rcu+0x9/0x30 [ 217.443237][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 217.443254][ C0] [ 217.443259][ C0] [ 217.443264][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.443280][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 217.443301][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 1f f4 c6 09 e8 3a 65 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 217.443319][ C0] RSP: 0018:ffffffff8dc07af8 EFLAGS: 00000282 [ 217.443333][ C0] RAX: 8acf02246d125800 RBX: 0000000000000000 RCX: 8acf02246d125800 [ 217.443344][ C0] RDX: 0000000000000000 RSI: ffffffff8d74d674 RDI: ffffffff8bc1ca60 [ 217.443354][ C0] RBP: ffffffff8dc07b50 R08: ffffffff8f7f1877 R09: 1ffffffff1efe30e [ 217.443366][ C0] R10: dffffc0000000000 R11: fffffbfff1efe30f R12: ffffffff8dc95240 [ 217.443377][ C0] R13: dffffc0000000000 R14: ffff88807b729e00 R15: ffff8880b883a6d8 [ 217.443395][ C0] ? finish_task_switch+0x266/0x950 [ 217.443416][ C0] __schedule+0x16ea/0x4cd0 [ 217.443438][ C0] ? schedule_idle+0x52/0x90 [ 217.443456][ C0] ? __pfx___schedule+0x10/0x10 [ 217.443473][ C0] ? flush_smp_call_function_queue+0x116/0x250 [ 217.443496][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 217.443514][ C0] schedule_idle+0x52/0x90 [ 217.443530][ C0] do_idle+0x4ad/0x510 [ 217.443545][ C0] ? __pfx_do_idle+0x10/0x10 [ 217.443564][ C0] cpu_startup_entry+0x44/0x60 [ 217.443578][ C0] rest_init+0x2de/0x300 [ 217.443598][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 217.443615][ C0] start_kernel+0x470/0x4f0 [ 217.443638][ C0] x86_64_start_reservations+0x2a/0x30 [ 217.443654][ C0] x86_64_start_kernel+0x66/0x70 [ 217.443668][ C0] common_startup_64+0x13e/0x147 [ 217.443714][ C0] [ 218.273216][ T5847] Bluetooth: hci2: command tx timeout [ 218.433413][ T9613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.572014][ T9613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.769444][ T9613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.901279][ T9613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.020625][ T9613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.033104][ T9613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.045116][ T9613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.060378][ T9613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.153669][ T1342] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.165206][ T1342] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.203423][ T9615] syz_tun (unregistering): left promiscuous mode [ 219.229334][ T1342] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.240093][ T1342] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.278784][ T1342] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.288708][ T1342] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.368286][ T1342] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.378231][ T1342] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.445522][ T1342] bridge0: port 3(batadv0) entered disabled state [ 219.453401][ T1342] bridge_slave_1: left allmulticast mode [ 219.459263][ T1342] bridge_slave_1: left promiscuous mode [ 219.464971][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.473833][ T1342] bridge_slave_0: left allmulticast mode [ 219.480041][ T1342] bridge_slave_0: left promiscuous mode [ 219.485798][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.819542][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.829669][ T1342] bond_slave_0: left promiscuous mode [ 219.835127][ T1342] bond_slave_0: left allmulticast mode [ 219.841925][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.851233][ T1342] bond_slave_1: left promiscuous mode [ 219.857894][ T1342] bond_slave_1: left allmulticast mode [ 219.863997][ T1342] bond0 (unregistering): Released all slaves [ 219.874235][ T1342] bond1 (unregistering): Released all slaves [ 219.977672][ T1342] IPVS: stopping backup sync thread 7520 ... [ 219.984227][ T1342] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 220.082878][ T1342] hsr_slave_0: left promiscuous mode [ 220.088727][ T1342] hsr_slave_1: left promiscuous mode [ 220.094359][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.101901][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.109729][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.117764][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.128122][ T1342] veth1_macvtap: left promiscuous mode [ 220.133625][ T1342] veth0_macvtap: left promiscuous mode [ 220.139370][ T1342] veth1_vlan: left promiscuous mode [ 220.183747][ T1342] pimreg3 (unregistering): left allmulticast mode [ 220.642667][ T1342] IPVS: stop unused estimator thread 0... [ 220.877127][ T1342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.932108][ T1342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.000004][ T1342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.040356][ T1342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.095063][ T1342] bridge_slave_1: left allmulticast mode [ 221.100800][ T1342] bridge_slave_1: left promiscuous mode [ 221.106923][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.115196][ T1342] bridge_slave_0: left allmulticast mode [ 221.121028][ T1342] bridge_slave_0: left promiscuous mode [ 221.126970][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.136108][ T1342] bridge_slave_1: left allmulticast mode [ 221.141838][ T1342] bridge_slave_1: left promiscuous mode [ 221.147636][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.156094][ T1342] bridge_slave_0: left allmulticast mode [ 221.161778][ T1342] bridge_slave_0: left promiscuous mode [ 221.167795][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.282383][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.292385][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.302907][ T1342] bond0 (unregistering): Released all slaves [ 221.403755][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.413933][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.424315][ T1342] bond0 (unregistering): Released all slaves [ 221.622948][ T1342] hsr_slave_0: left promiscuous mode [ 221.628849][ T1342] hsr_slave_1: left promiscuous mode [ 221.634607][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.642356][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.652366][ T1342] hsr_slave_0: left promiscuous mode [ 221.658244][ T1342] hsr_slave_1: left promiscuous mode [ 221.663871][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.672654][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.680453][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.687898][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.700365][ T1342] veth1_macvtap: left promiscuous mode [ 221.706037][ T1342] veth0_macvtap: left promiscuous mode [ 221.711575][ T1342] veth1_vlan: left promiscuous mode [ 221.716957][ T1342] veth0_vlan: left promiscuous mode [ 221.874099][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 221.897323][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 222.078132][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 222.097650][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 223.460750][ T3489] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.509162][ T3489] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.559128][ T3489] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.599875][ T3489] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.655075][ T3489] hsr0: left allmulticast mode [ 223.660059][ T3489] hsr_slave_0: left allmulticast mode [ 223.665469][ T3489] hsr_slave_1: left allmulticast mode [ 223.672039][ T3489] hsr0: left promiscuous mode [ 223.677052][ T3489] bridge0: port 3(hsr0) entered disabled state [ 223.684236][ T3489] bridge_slave_1: left promiscuous mode [ 223.689969][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.698125][ T3489] bridge_slave_0: left allmulticast mode [ 223.703769][ T3489] bridge_slave_0: left promiscuous mode [ 223.709468][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.762751][ T3489] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 223.804815][ T3489] bond2 (unregistering): (slave gretap1): Releasing active interface [ 223.837752][ T3489] bridge0 (unregistering): left promiscuous mode [ 224.001396][ T3489] bond0 (unregistering): (slave 2@ÿ): Releasing backup interface [ 224.011186][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.020804][ T3489] bond0 (unregistering): Released all slaves [ 224.030293][ T3489] bond1 (unregistering): Released all slaves [ 224.040902][ T3489] bond2 (unregistering): Released all slaves [ 224.137147][ T3489] IPVS: stopping master sync thread 7352 ... [ 224.264014][ T3489] hsr_slave_0: left promiscuous mode [ 224.269838][ T3489] hsr_slave_1: left promiscuous mode [ 224.275497][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.283142][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.290891][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.299934][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.309572][ T3489] veth1_macvtap: left promiscuous mode [ 224.315131][ T3489] veth1_vlan: left promiscuous mode [ 224.320440][ T3489] veth0_vlan: left promiscuous mode [ 224.449332][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 224.466333][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 224.752662][ T3489] IPVS: stop unused estimator thread 0...