last executing test programs: 1m18.115524839s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 1m4.404374026s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 54.212822599s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 37.748552256s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 25.822700765s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 11.735754373s ago: executing program 2 (id=389): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f0000000540)={0x2, 0x100, @broadcast}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa020800450039132f9aa4400000007864010101ac1414aa20044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290780000"], 0x0) 1.851805357s ago: executing program 4 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000300000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.624068428s ago: executing program 4 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000000500000095000000000000009500a505000090ff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.507076948s ago: executing program 4 (id=1051): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.410911315s ago: executing program 1 (id=1052): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xfffffffe, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140)=0xfffffffc, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003240)="d457", 0x2}, {0x0, 0x28}], 0x2}}], 0x1, 0xb005050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x28000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r5, 0x4, 0x2, 0x5, 0x10e7, 0x8, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x8, 0xc6f, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000440)={0xf8, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0xcf, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0x0, 0x3}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x800, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x68}, @void, @void, @val={0x5, 0x68, {0x4, 0x63, 0x6, "73af0e3efaa98fcdb6429a8f7965998bb8c1b9e329bad3b73e0201781e23212460951cd1afdde0834ed6f29e7258811a350576db78312231d259b51150af15750d4f1fb966061861ed7e7d92af86a03ef4804d03c89f6554ea4a0d3ec73f8ce70bb1b7de0f"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x1, 0x4, 0x0, {0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3}, 0x300, 0xf, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x8, 0x6, 0xdf7d}}}}, @NL80211_ATTR_MAC={0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000000)="27013a0596a3555fe48cee5fd64cf0822069a3cf49b0fb3a323828c779343e473e0a6f775ede1773b76e7bedc58317f6a417cc14d9b885ca99e757589dc03d915bd2") 1.272862935s ago: executing program 4 (id=1054): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001072d57da01ffdbdf250a0000006520540f407a47f9ae617d3660147339344b3096506e16f69b8faf8841d3b0a585e6154241b714c1aa8b1b6a78b49f1f4c5bb19f2ba5f452edebcea35639fc7330dc7d0b30bae5c83d1e310ad7854466184281492010e8e76572fd7cd370dd4d8a3061e008daf1c847284e5d930703d644880d67"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x6788, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, 0xe) listen(0xffffffffffffffff, 0x101) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$kcm(0xf, 0x3, 0x2) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x6, 0x81, 0x1ff, 0x1, 0x2}, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000041600001aaa2489000000000000", @ANYRES32=0x0, @ANYBLOB="00000000c08000000800040010000000"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000440)=""/191, 0xbf}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="25010000000000000000000000000000000000004420dcc155cb6205577071e0e03cdb96eb4ff2400f1409e795799c1aa3bca36c7a10b40d93cc0b89055d36268862b7964bbd601329a08c9e095a37f855b05d594ed2f17bb6ed5eb3b930b29fe15055036b7007000000000000009a6b20c7843b83d97371789df2d8e6219bf3133960af63b2538c37c960e5385863d59d4ccfd59979e93d4015e156ed137bb6121cfb6acbe35c472b20b30124f3abda3ea37cee4abe415323ac7568efe8093b3ba5a1fe574a0b99f633c8e880bad95b3cc1d6c9189b"], 0x14}, 0x1, 0x0, 0x0, 0x401}, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0xffffffffffffffe8, 0x9, 0x4, 0x4, 0xfff, 0x64f3}, &(0x7f0000000140)={0x1, 0xa, 0x2, 0x1, 0x5, 0x9, 0x5, 0xffffffffffffff07}, &(0x7f0000000180)={0x5, 0x0, 0x5, 0xab, 0x9, 0x0, 0x0, 0x7fffffff}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x38, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000db06000000000073a45ab608990600000000cd38203616a84b008500b6d5adf6000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.272161123s ago: executing program 3 (id=1055): r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0xa0, 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbb41c97ea72d4101748468c97bbbbbbbbbb86dd603000bb00142b00fc020000000000000000000000000000fe6800000000000000000000000000aa0100020800000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0x200000, {0x0, 0x0, 0x3, 0x0, 0x2e03, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfeffffff00000000}}]}}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) getgid() r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r5, 0x8, 0x70bd28, 0x25dfdb7d, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x440c5}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000240)}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xbc, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xb, 0x4, "df41412cc4e9f2"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f4ac919dc4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "730b44a075ff24ac49b5eea7f4"}, @NL80211_KEY_TYPE={0x8}]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="5e5c2a67e761"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1ec669449840c3a6}, 0x4002040) 1.207738069s ago: executing program 0 (id=1056): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001a40)={0x3c, @private=0xa010102, 0x4e23, 0x2, 'sh\x00', 0x20, 0x6, 0xd}, 0x2c) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7}}], 0x3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="41000000010001", 0x7) close(r4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="4c00000010000400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000001c000280050009008900000005000a00000000000800140000000000"], 0x4c}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x7, 0x19, 0x10001, 0x2, 0x61052, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x200000000000001) 1.114489306s ago: executing program 3 (id=1057): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000fffc08000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.035901967s ago: executing program 1 (id=1058): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$kcm(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000cfd02000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 936.033662ms ago: executing program 0 (id=1059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00002095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 803.550518ms ago: executing program 3 (id=1060): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYRES64=r2, @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 801.117473ms ago: executing program 1 (id=1061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000003000000020ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0x0], 0xb8}}, 0x0) 797.919984ms ago: executing program 0 (id=1062): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004540)={@map, 0xffffffffffffffff, 0x27, 0x20, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e120900190000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 616.042407ms ago: executing program 1 (id=1063): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 615.560004ms ago: executing program 0 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 580.326338ms ago: executing program 3 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 522.585802ms ago: executing program 1 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce35bf52e30", 0x7}, {&(0x7f0000000500)="82c3e47a46c31dcf3630faa7f023a09eb4c34fd6711f8b9ebbdd19314080bb87b57a5e45b966ed093d43615e73b3abc0cc4745d79c944781a97578e444bf2c83088507a690dfbb55f30098fe852a6756f18b465a30e205cc20744c49512e91e55c237f3631d9afdc7fa7c672101e700816cc4a918729f2d71f91ab953bcb4d04df9ced1e0e", 0x85}, {&(0x7f0000000680)="2090dad7f6894cb4b084d3bba88af68e41037522b6fb654b517f3c42bfc141e814c58aa352c6991e75be7b39ebf4aed0cd341c31d040a0f0624b9ae50366efedf552", 0x42}, {&(0x7f0000000700)="06d4f4b69d966212b98528a7141bfe39bde7d1431dcc6249674022cd037a6eb432ab751bd1b4f3bdb5ded0f7ff9b5332dce60dc2683406985c277d11db44ecc911dac644b51b2c1667fd6e2fb20bb41df51e838a4b926bd54fc47118d1de2e4086c4bad90bc37d0708efd8bc328e1fcd1cdaa40696f9ff1dccb7d27a2ef50d20dabcba270dc87a0cf8dfd276b48751bb077a24169723c9", 0x97}, {&(0x7f00000007c0)="6cb9c69d7cc22f96463bdd5060a99c3522868d5aa8c32e34c4596ba46d854053744ed21d579eeeb3bfb2835caf13512f92ada4c1597e2a6726f56b1e884f148f3049eb87c4fa328b4b0bafed3a3a44d6da25dfbca3074cd3adb3fb17b978b9f41c96607117400e9881a8672f66be", 0x6e}, {&(0x7f0000000840)="8ac519b94021dc97c772605ab769e903d661f12c4017d916fa6b5f17216a60f5cbb368e156f806d3487ad3ea086eb808f4d1749855cfe8167b6df463cfbbe6159a6d909ea4b5be3a53a74ce5b6a8941100b0f73d5418c09c2e0701895d701656d59d31b4b832c6a95160a4fe514dbc730f31440c8c", 0x75}, {&(0x7f00000005c0)="4aff497006d5a99b2e6f5d26ca", 0xd}], 0x7, &(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x118, 0x20000004}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000a80)="1fd8635375ba5656bba7f0177c91c4b4bfdeb63f863d100345d8f5bf4a611653f7c9bfa8dc67d0b728a579aa74d7ea095f9e3bd13b251bae30fb3bea03bafa6a4bf09d92e4594f0ce6e663a8e17a065362b42f1db373aa8477e872bc08767e05e2cc2e53ba76725b2637a4f9a3f499389d763a99f7c80d24796d93df307a7ad242e4ad7b60fa29003864c138905784172a12b56e62a5f306b9ea3513f597069e600db9a03c2be0d5d73cd48699c9", 0xae}, {&(0x7f0000000b40)="e46ea21dd71a985d4efe0a98f0d50544f8d8c19a764211f70989d253c6bfeb8ebb490ba6e3dd9315fcf73caf551e6b12df36dfdfe6cb", 0x36}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000b80)="181a03742ef21e269888e914ef9ffb0a94abdb39e80dc99e9aa97d695c59af5dc62a5a1df187550ca4bf5725750dce4ffd160a34919a2cc9683acbe55ede44ad3ffb6e34ad7333f132bf6737b45017", 0x4f}, {&(0x7f0000000c00)="74eb281b12a5bdfa980b5e4ac9597cefa1e6d9cde99d376adf1fd76a09cc336647a4a4fd547e2d69cdaba7ee646d3a49ee9c81c33790c50dcea251fe7c0f47d30d10b606c8c9c799f1bdda9cf293b73ffc7009560a6b6b604888bbe728a84d", 0x5f}, {&(0x7f0000000c80)="5a743e62d1b2f23de294833630b096554d795d2254a461024b1b299bc2dc594ae03b2c65c17ffe7b187c66b250b40fa1d7a3a3987957660e1bd63dda9c1cb6bd307727f07258b4d96ff85440e2e50a099d60c94e4a310652d2186da5bdb251470c56f97c754c627911ba6ad8c11a2c59e7f926fa18c8c58b6aa5dffc660bf2", 0x7f}, {&(0x7f0000000dc0)="a38294d25530705ccaa0ff5b610249c179e0382b35ed3921dbb2c48ba4e9be735514a91e9397769e3aee409e74905ae528f90b8bb99fea9cc4cd1d2223255c134b0fe6c4bfefef1d6adeaa968e6a35ed5339e39a4be2f49e1552e2865d8d1dcddb987daf9292ba63c2ee98281558325c6ca3df4aef8dd301687cc8a8a2eed613d26c28b5fb302ca6c1cd914c9947a6162a73d61575c690214859ef6f92c22c45daf7fc0494c4b19954f8ffe9c4d6693b4556e42a22c25a9b0965fec12b26e5caa0633173f2260a7ca549523e43045acf715087ed97cdccd8555c98", 0xdb}, {&(0x7f0000000d00)='A#%e', 0x4}, {&(0x7f0000000ec0)="70e8374e93c211fa3dd3601a6b124ed0cfdfbae9361d0f89cf592fd74f50ceaa99810f8b18171a8994d5f3abf0918075a02cc4dc1a08634246670f4750b035e44d634371f4ccc700d3dcdc9aee9d9232823671a9cf9a1bd8", 0x58}], 0x9, 0x0, 0x0, 0x20000040}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001000)="3f15acb220efcf3ee934fdbd6c67f5b5cb1f0462b6bb74af80aac0384b544d51ba0a0051bf0d58e5e747e3d29c514d0d143d734402299d77564dd89c5ae46c6a8f7cbcc0b109d707d5d39a3673f433d8f03e45fb9558dca4c11cb5f48f83a3dd0b148564d5a004cba7e5c32ea89ccc0df97add31050df0d5", 0x78}, {&(0x7f0000001080)="4d2fc1a4fb31347cef350bc37afbad0e3225f2d2b5bd9d7998314303792b79624f0e860c2f15147d9f46790aa55ea38b12d2116f1c5cdb7900c6dcea10cae94c456d3aeb2cb06072fdc851a7b7dcc670beea2735ced8b90cfde31e484659", 0x5e}, {&(0x7f0000002180)="05bfff126cdfa6315e9182b688b766d0e92ea61d0e0c29d5580f3aff0c443da14a6be9c774c055c41d9b8b69155fbbd8966096e9e2c0f05035b5c2256e5990c75e6cc356b715e17e42efe7a99cb9cc9ceb10e0f23a787e5665682ceb7c5ee61ec1dcefc29e6e239b3e0eb5571740ea9d6978068f8fec8f07d097cd96f7c4f00515", 0x81}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="18e5cad6e7aeb152544ba6cc2dc799a8e24b7bc3148a4f30f75176d75ade23801159ab99f9566ac0f0d45edb4e99e1817394a06384f123dee24440c4d32698b8d27e1923f948c33ff79814f43740469f9f91c7fcd3b2b1aa0dcb8288cd27eb1014ccd45d353ed183a3555fb4a2ab08dc95b74dad49ebe0628154a827a9bd47f111dfd6da165354be31d32e8c664b90b6ddaaa1a8860fb39075", 0x99}, {&(0x7f0000000d40)="1f059905f54b662b8d5d043037f741530583462c8c388437dfeefd171fa15267788bcf5fbe14f147339048651f42bdf709bda325f6e11d31f4bee3c4", 0x3c}], 0x6, &(0x7f0000001100)=[@iv={0x38, 0x117, 0x2, 0x21, "f22ee7dd305f3a9f5a009f92ddca15ebe3d5a58f499b0b47f5725dca4d949ebb90"}], 0x38, 0x80}], 0x3, 0x20004000) 419.50888ms ago: executing program 0 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000d5100039142cbd70dc7348e00000000000", @ANYRES32=0x0, @ANYBLOB="0598000000200000240012800800010067726500180002800400120005000a00000000000500130001000000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001072d57da01ffdbdf250a0000006520540f407a47f9ae617d3660147339344b3096506e16f69b8faf8841d3b0a585e6154241b714c1aa8b1b6a78b49f1f4c5bb19f2ba5f452edebcea35639fc7330dc7d0b30bae5c83d1e310ad7854466184281492010e8e76572fd7cd370dd4d8a3061e008daf1c847284e5d930703d644880d67"], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008001500"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 351.812771ms ago: executing program 1 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804b0000}, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000440)=""/15, 0x101000, 0x0, 0x81, 0x2}, 0x20) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) r6 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r7, 0x1) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e0", 0x19}], 0x1}, 0x8400) sendmsg$inet(r6, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6e4602e2", 0x4}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0xff8, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 351.421986ms ago: executing program 3 (id=1069): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001a40)={0x3c, @private=0xa010102, 0x4e23, 0x2, 'sh\x00', 0x20, 0x6, 0xd}, 0x2c) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7}}], 0x3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="41000000010001", 0x7) close(r4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="4c00000010000400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800900010069706970000000001c000280050009008900000005000a00000000000800140000000000"], 0x4c}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x7, 0x19, 0x10001, 0x2, 0x61052, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x200000000000001) 288.215048ms ago: executing program 4 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x6) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x304}, "d9fbafe132b41400", "e7b2d5f8c45903e9196bc4794cfd3f58", "55840a40", "8b6810680b5e6bf3"}, 0x28) (async) sendto$inet6(r0, 0x0, 0x0, 0xc0c0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100053", @ANYRESOCT=r0, @ANYRESHEX, @ANYRESOCT], 0x104}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYBLOB="070003000000000000006700000008000300c3faaff24ab4335482ce52c79a2fbf0e0c1e93794f5c428e11cf7adf5582380451081cb13e81d30458f6abd2a03a8241f0e982c2c0c5306e3d6346deada0c779595ab0ff5e7de7209aef25d9566a5d5e8af8d18a94a0bbbf3978669242869690656593a6c091ae30712db29d2ed7af5c180d7d7539ea1382e29248373ee8f179b7755399f960dc54e334c1e0c0b4820584d5f74bb51960d5e6df4c6ee5b73e103833b7cc8d8a4f7d3a7d8427bc8e5068c84efe5dc682c300f9a446b6", @ANYRESDEC=r0, @ANYBLOB="0c00990000000000000000000800178004000080"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="bbe235a9a8cd7230b2ee274cbf7423e994c64c73afb722eef713cadfd101aa00282fe2aca8beaaee4dbdc4afe72cdb8863c9fc3264873b239a50ca482e2af4f4cb8966449860b44c66d858d33051be08cffcfe4fa2ac3ba82e576da211b7d1956efd9a8dcf5db0e88586872f8b2fa9ea9e0f92fcce6492383493e3f41bb63b0c7240d1d21bba8f684cada280ce9be5e611acfd81719cf6b54b24736c32895fa71e1d403f3e0f99ffffd8"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x8004) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x722) (async) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0xffff, 0xdb, @loopback}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e28, 0xffffffab, @private0}, 0x1c) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 204.581789ms ago: executing program 0 (id=1071): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0xffffffff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xffe, {0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) close(r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r4, r4, 0x36, 0xce2d3afaee448c72, 0x4, @void, @void, @void, @value}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)={0x170, 0x464, 0x200, 0x70bd25, 0x25dfdbfe, "ae41ec9b0796e4556a334a9f3568cca6b144e7da3f38d111b1125e3f5a49bf4478a642698f8d90bce45f164ee544ae5a2798df1568f113ca3a9acf79016a87f520f6b5fc7e6782bdc3bc58a8ef7f8fc5bd8227b47133c9a707d3ced5e1df1ecadd14f3288af89137486a579aff2c9ff6238e12cf5bd43cd68c89d929883c40cc94e85bb874dbb7c459ca99fdbd98254a374c6a0b0c9cb748c7317f0519ce0b37356f2f9216c7cf3f40408c7ea84afbd890e8921c672254c1a114d92efe1a1f7660d0190fd5c02a49a1517af3694920763e297031a32a70d6906447606a945f884f31190b2cf6f1ea16812c23878ec7e78167630aab2f7160350ca61ac3c1508c632f7c13b76f7d9d5d9331c6d44d665f73a5f903b32dbe6b87629bc9de42af5ef9be8c9fac00def9531cb41d51a6b1c3a546f51611281b900178b05f9d18054dcb79f949d561d4412f125c1a287773b09c3b0f4f9ce5448a00cba29b1c92", ["", ""]}, 0x170}, 0x1, 0x0, 0x0, 0x24040000}, 0x240008c9) r8 = socket(0x11, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4'], 0x10) (async) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 57.788106ms ago: executing program 3 (id=1072): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$kcm(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000cfe02000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 0s ago: executing program 4 (id=1073): unshare(0x4000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x10000000}) kernel console output (not intermixed with test programs): .619150][ T7214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.650936][ T7314] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 124.806997][ T7214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.851791][ T7321] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 124.867095][ T7321] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'. [ 124.888910][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.1.425'. [ 124.930292][ T7214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.993247][ T7321] macvlan0: entered promiscuous mode [ 125.000911][ T7321] bridge0: entered promiscuous mode [ 125.007173][ T7321] vlan4: entered promiscuous mode [ 125.018243][ T7321] bond0: entered promiscuous mode [ 125.035325][ T7321] bridge0: port 2(macvlan0) entered blocking state [ 125.061167][ T7321] bridge0: port 2(macvlan0) entered disabled state [ 125.083024][ T7321] macvlan0: entered allmulticast mode [ 125.098396][ T7321] bridge0: entered allmulticast mode [ 125.117936][ T7321] macvlan0: left allmulticast mode [ 125.133822][ T7321] bridge0: left allmulticast mode [ 125.144036][ T7325] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.151461][ T7321] bridge0: left promiscuous mode [ 125.166703][ T7321] vlan4: left promiscuous mode [ 125.171553][ T7321] bond0: left promiscuous mode [ 125.465585][ T7215] Bluetooth: hci1: command tx timeout [ 125.685068][ T7336] batadv0: entered promiscuous mode [ 125.694887][ T7336] macvtap0: entered promiscuous mode [ 125.705036][ T7336] macvtap0: entered allmulticast mode [ 125.727949][ T7336] batadv0: entered allmulticast mode [ 125.739949][ T7336] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 125.775225][ T7214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.815944][ T7214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.851268][ T7214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.904098][ T7214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.160876][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.187409][ T7358] bridge_slave_0: entered promiscuous mode [ 126.204661][ T7358] bridge_slave_0: entered allmulticast mode [ 126.242740][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.275657][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.283781][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.327725][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.334957][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.452932][ T7367] netlink: 'syz.0.434': attribute type 11 has an invalid length. [ 126.494860][ T7364] lo speed is unknown, defaulting to 1000 [ 126.627615][ T7372] batadv0: entered promiscuous mode [ 126.634010][ T7372] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 126.667281][ T7372] batadv0: left promiscuous mode [ 127.058649][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.257097][ T7390] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 127.276528][ T7214] veth0_vlan: entered promiscuous mode [ 127.328598][ T7214] veth1_vlan: entered promiscuous mode [ 127.360455][ T7390] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 127.381344][ T7392] __nla_validate_parse: 4 callbacks suppressed [ 127.381364][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 127.442461][ T7394] IPv6: sit1: Disabled Multicast RS [ 127.460688][ T7394] sit1: entered allmulticast mode [ 127.466548][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 127.523099][ T7392] macvtap3: entered promiscuous mode [ 127.548355][ T7215] Bluetooth: hci1: command tx timeout [ 127.555991][ T7392] macvtap3: entered allmulticast mode [ 127.562494][ T7392] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 127.577223][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 127.647923][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 127.680278][ T7214] veth0_macvtap: entered promiscuous mode [ 127.699393][ T7214] veth1_macvtap: entered promiscuous mode [ 127.719254][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.730757][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.741864][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.752549][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.786450][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.805496][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.825502][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.868969][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.878807][ T7403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.447'. [ 127.907761][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.919991][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.931719][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.941667][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.954033][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.964331][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.014064][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.031509][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.046314][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.077577][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.112585][ T7214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.136619][ T7214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.157502][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 128.166630][ T7214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.175363][ T7214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.260243][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 128.316885][ T7417] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.390196][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.410231][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.461245][ T7419] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 128.492506][ T7419] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 128.501777][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.512036][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.566573][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.574464][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.088977][ T7440] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 129.107038][ T7440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.458'. [ 129.123744][ T7445] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.152689][ T7445] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 129.272465][ T7442] tipc: Resetting bearer [ 129.299295][ T7442] bridge0: port 3(team0) entered disabled state [ 129.306158][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.313718][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.362495][ T7442] vcan0: left promiscuous mode [ 129.381798][ T7442] vcan0: left allmulticast mode [ 129.460098][ T7452] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 129.521309][ T7452] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 129.531645][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.547417][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.661788][ T7442] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.676325][ T7442] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.685265][ T7442] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.724137][ T7442] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.941087][ T7442] vti0: left promiscuous mode [ 129.948126][ T7442] macvtap1: left promiscuous mode [ 129.953380][ T7442] macvtap1: left allmulticast mode [ 130.007106][ T7442] macvtap2: left promiscuous mode [ 130.012212][ T7442] macvtap2: left allmulticast mode [ 130.034483][ T7442] batadv0: left allmulticast mode [ 130.046901][ T7442] macvtap3: left promiscuous mode [ 130.052004][ T7442] macvtap3: left allmulticast mode [ 130.079019][ T7440] macvlan0: entered promiscuous mode [ 130.107533][ T7440] bridge0: entered promiscuous mode [ 130.112834][ T7440] vlan4: entered promiscuous mode [ 130.130892][ T7440] bond0: entered promiscuous mode [ 130.152578][ T7440] bridge0: port 2(macvlan0) entered blocking state [ 130.176101][ T7440] bridge0: port 2(macvlan0) entered disabled state [ 130.205763][ T7440] macvlan0: entered allmulticast mode [ 130.211261][ T7440] bridge0: entered allmulticast mode [ 130.228869][ T7440] macvlan0: left allmulticast mode [ 130.244823][ T7440] bridge0: left allmulticast mode [ 130.258999][ T7440] bridge0: left promiscuous mode [ 130.274795][ T7440] vlan4: left promiscuous mode [ 130.279929][ T7440] bond0: left promiscuous mode [ 130.369082][ T7461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.378268][ T7461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.392532][ T7461] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.402491][ T7461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.415801][ T7461] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.423262][ T7461] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.457642][ T2927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.492298][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.506792][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.516021][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.523595][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.588246][ T7457] netlink: 'syz.0.462': attribute type 15 has an invalid length. [ 130.632423][ T7445] lo speed is unknown, defaulting to 1000 [ 130.669151][ T2927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.997637][ T7459] lo speed is unknown, defaulting to 1000 [ 131.017194][ T2927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.033796][ T7469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.181505][ T2927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.305089][ T7478] lo speed is unknown, defaulting to 1000 [ 131.374431][ T7479] lo speed is unknown, defaulting to 1000 [ 131.386558][ T7461] Bluetooth: hci4: command 0x0405 tx timeout [ 131.423937][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 131.798193][ T7507] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 131.810815][ T2927] bridge_slave_1: left allmulticast mode [ 131.825822][ T2927] bridge_slave_1: left promiscuous mode [ 131.832944][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.878160][ T2927] bridge_slave_0: left allmulticast mode [ 131.890849][ T2927] bridge_slave_0: left promiscuous mode [ 131.898710][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.512789][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.521998][ T7215] Bluetooth: hci1: command tx timeout [ 132.544773][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.557413][ T2927] bond0 (unregistering): Released all slaves [ 132.606722][ T7507] bridge0: entered promiscuous mode [ 132.612077][ T7507] macvlan2: entered promiscuous mode [ 132.619604][ T7507] bridge0: port 3(macvlan2) entered blocking state [ 132.646133][ T7507] bridge0: port 3(macvlan2) entered disabled state [ 132.660466][ T7507] macvlan2: entered allmulticast mode [ 132.670020][ T7507] bridge0: entered allmulticast mode [ 132.681296][ T7507] macvlan2: left allmulticast mode [ 132.702207][ T7507] bridge0: left allmulticast mode [ 132.712193][ T7507] bridge0: left promiscuous mode [ 132.853462][ T7510] lo speed is unknown, defaulting to 1000 [ 132.854103][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.869549][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.876932][ T7459] bridge_slave_0: entered allmulticast mode [ 132.883811][ T7459] bridge_slave_0: entered promiscuous mode [ 132.892153][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.902911][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.921311][ T7459] bridge_slave_1: entered allmulticast mode [ 132.932293][ T7459] bridge_slave_1: entered promiscuous mode [ 133.071862][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078459][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.103671][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.189859][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.252823][ T7459] team0: Port device team_slave_0 added [ 133.351023][ T7459] team0: Port device team_slave_1 added [ 133.379488][ T7530] __nla_validate_parse: 7 callbacks suppressed [ 133.379506][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 133.401946][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 133.416345][ T2927] hsr_slave_0: left promiscuous mode [ 133.425680][ T2927] hsr_slave_1: left promiscuous mode [ 133.425681][ T7530] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 133.425705][ T7530] netlink: 10 bytes leftover after parsing attributes in process `syz.3.478'. [ 133.431752][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.458428][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.483398][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.493899][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.525814][ T2927] veth1_macvtap: left promiscuous mode [ 133.531863][ T2927] veth0_macvtap: left promiscuous mode [ 133.538333][ T2927] veth1_vlan: left promiscuous mode [ 133.564912][ T2927] veth0_vlan: left promiscuous mode [ 134.090219][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 134.131924][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 134.587153][ T7461] Bluetooth: hci1: command tx timeout [ 134.616081][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.623993][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.650570][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.665379][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.672946][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.700166][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.760960][ T7459] hsr_slave_0: entered promiscuous mode [ 134.783771][ T7459] hsr_slave_1: entered promiscuous mode [ 134.793705][ T7459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.816886][ T7459] Cannot create hsr debugfs directory [ 134.863558][ T7546] xt_TCPMSS: Only works on TCP SYN packets [ 134.930873][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 134.940362][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 135.732088][ T7459] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.756342][ T7459] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.778703][ T7459] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.808054][ T7459] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.914455][ T51] IPVS: starting estimator thread 0... [ 136.015671][ T7578] IPVS: using max 21 ests per chain, 50400 per kthread [ 136.098816][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.161349][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.204310][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.211559][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.242563][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.249802][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.506379][ T7597] lo speed is unknown, defaulting to 1000 [ 136.605325][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 136.666054][ T7085] Bluetooth: hci1: command tx timeout [ 136.703644][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.726232][ T7604] netlink: 'syz.0.496': attribute type 11 has an invalid length. [ 136.759464][ T7599] lo speed is unknown, defaulting to 1000 [ 137.114238][ T7459] veth0_vlan: entered promiscuous mode [ 137.167029][ T7459] veth1_vlan: entered promiscuous mode [ 137.218367][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 137.298337][ T7459] veth0_macvtap: entered promiscuous mode [ 137.339547][ T7459] veth1_macvtap: entered promiscuous mode [ 137.432595][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.495741][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.522518][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.556001][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.560263][ T7627] netlink: 100 bytes leftover after parsing attributes in process `syz.1.505'. [ 137.580901][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.625224][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.655448][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.675472][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.691764][ T7637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.695466][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.730175][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.775115][ T7459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.796682][ T7459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.821727][ T7459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.855474][ T7459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.905014][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 137.983774][ T7643] macvtap1: entered promiscuous mode [ 137.989718][ T7643] macvtap1: entered allmulticast mode [ 137.996598][ T7643] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.277285][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.290874][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.390899][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.411090][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.442731][ T7647] syz.1.509: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 138.505927][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.1.509 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 138.505956][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.505968][ T7647] Call Trace: [ 138.505975][ T7647] [ 138.505983][ T7647] dump_stack_lvl+0x241/0x360 [ 138.506018][ T7647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.506041][ T7647] ? __pfx__printk+0x10/0x10 [ 138.506065][ T7647] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 138.506091][ T7647] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 138.506120][ T7647] warn_alloc+0x278/0x410 [ 138.506145][ T7647] ? __pfx_warn_alloc+0x10/0x10 [ 138.506171][ T7647] ? xskq_create+0xb6/0x170 [ 138.506201][ T7647] ? __get_vm_area_node+0x1c8/0x2d0 [ 138.506232][ T7647] ? __get_vm_area_node+0x25c/0x2d0 [ 138.506269][ T7647] __vmalloc_node_range_noprof+0x62f/0x1380 [ 138.506318][ T7647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.506344][ T7647] ? __kasan_kmalloc+0x98/0xb0 [ 138.506373][ T7647] vmalloc_user_noprof+0x74/0x80 [ 138.506394][ T7647] ? xskq_create+0xb6/0x170 [ 138.506422][ T7647] xskq_create+0xb6/0x170 [ 138.506454][ T7647] xsk_init_queue+0xa1/0x100 [ 138.506487][ T7647] xsk_setsockopt+0x560/0x810 [ 138.506518][ T7647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 138.506547][ T7647] ? __pfx_aa_sk_perm+0x10/0x10 [ 138.506576][ T7647] ? __pfx_lock_acquire+0x10/0x10 [ 138.506604][ T7647] ? aa_sock_opt_perm+0x79/0x120 [ 138.506640][ T7647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 138.506666][ T7647] do_sock_setsockopt+0x3af/0x720 [ 138.506699][ T7647] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 138.506726][ T7647] ? __fget_files+0x395/0x410 [ 138.506753][ T7647] ? __fget_files+0x2a/0x410 [ 138.506790][ T7647] __x64_sys_setsockopt+0x1ee/0x280 [ 138.506816][ T7647] do_syscall_64+0xf3/0x230 [ 138.506840][ T7647] ? clear_bhb_loop+0x35/0x90 [ 138.506872][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.506898][ T7647] RIP: 0033:0x7fa24f78d169 [ 138.506916][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.506932][ T7647] RSP: 002b:00007fa250532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.506953][ T7647] RAX: ffffffffffffffda RBX: 00007fa24f9a6080 RCX: 00007fa24f78d169 [ 138.506967][ T7647] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 138.506979][ T7647] RBP: 00007fa24f80e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 138.506990][ T7647] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 138.507002][ T7647] R13: 0000000000000000 R14: 00007fa24f9a6080 R15: 00007ffe47aed2b8 [ 138.507030][ T7647] [ 138.507136][ T7647] Mem-Info: [ 138.684336][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 138.755811][ T7085] Bluetooth: hci1: command 0x0419 tx timeout [ 138.820720][ T7647] active_anon:4582 inactive_anon:0 isolated_anon:0 [ 138.820720][ T7647] active_file:1492 inactive_file:38325 isolated_file:0 [ 138.820720][ T7647] unevictable:768 dirty:161 writeback:0 [ 138.820720][ T7647] slab_reclaimable:10703 slab_unreclaimable:101126 [ 138.820720][ T7647] mapped:28459 shmem:1427 pagetables:765 [ 138.820720][ T7647] sec_pagetables:0 bounce:0 [ 138.820720][ T7647] kernel_misc_reclaimable:0 [ 138.820720][ T7647] free:1339876 free_pcp:229 free_cma:0 [ 138.876990][ T7647] Node 0 active_anon:18328kB inactive_anon:0kB active_file:5968kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113836kB dirty:640kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11636kB pagetables:3060kB sec_pagetables:0kB all_unreclaimable? no [ 139.026502][ T7647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 139.079838][ T7647] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.183950][ T7647] lowmem_reserve[]: 0 2489 2490 0 0 [ 139.193120][ T7647] Node 0 DMA32 free:1435728kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18116kB inactive_anon:0kB active_file:5968kB inactive_file:152900kB unevictable:1536kB writepending:652kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:2092kB local_pcp:896kB free_cma:0kB [ 139.229644][ T7669] delete_channel: no stack [ 139.237199][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 139.242285][ T7647] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.321222][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 139.326407][ T7647] Node 1 Normal free:3907424kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.413104][ T7674] lo speed is unknown, defaulting to 1000 [ 139.419530][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 139.439241][ T7647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.475623][ T7647] Node 0 DMA32: 27*4kB (UM) 29*8kB (ME) 33*16kB (ME) 341*32kB (UME) 168*64kB (UME) 71*128kB (UME) 29*256kB (UME) 5*512kB (UME) 8*1024kB (UME) 4*2048kB (M) 336*4096kB (M) = 1434244kB [ 139.562979][ T7647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 139.592913][ T7647] Node 1 Normal: 232*4kB (UME) 52*8kB (UME) 38*16kB (UME) 210*32kB (UME) 100*64kB (UME) 31*128kB (UME) 11*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3907424kB [ 139.626306][ T7647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.636370][ T7647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.645742][ T7647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.675640][ T7647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.685108][ T7647] 41245 total pagecache pages [ 139.725524][ T7647] 0 pages in swap cache [ 139.729837][ T7647] Free swap = 124996kB [ 139.734036][ T7647] Total swap = 124996kB [ 139.787701][ T7647] 2097051 pages RAM [ 139.791592][ T7647] 0 pages HighMem/MovableOnly [ 139.835772][ T7647] 427897 pages reserved [ 139.839996][ T7647] 0 pages cma reserved [ 139.880520][ T311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.083576][ T311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.139524][ T7690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 140.268490][ T311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.316121][ T7688] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 140.401080][ T311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.506125][ T7700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.516470][ T7700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.524861][ T7700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.541478][ T7700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.549231][ T7704] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 140.559028][ T7700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.562311][ T7704] netlink: 'syz.3.526': attribute type 93 has an invalid length. [ 140.574408][ T7700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.670524][ T7699] lo speed is unknown, defaulting to 1000 [ 140.688093][ T311] bridge_slave_1: left allmulticast mode [ 140.693930][ T311] bridge_slave_1: left promiscuous mode [ 140.700025][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.716308][ T311] bridge_slave_0: left allmulticast mode [ 140.722246][ T311] bridge_slave_0: left promiscuous mode [ 140.728348][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.103132][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.112939][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.265073][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.307075][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.320747][ T311] bond0 (unregistering): Released all slaves [ 141.348222][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.486708][ T7727] netlink: 100 bytes leftover after parsing attributes in process `syz.4.531'. [ 141.846515][ T7737] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 141.868054][ T7737] netlink: 'syz.0.535': attribute type 2 has an invalid length. [ 141.976196][ T7738] lo speed is unknown, defaulting to 1000 [ 142.103031][ T311] hsr_slave_0: left promiscuous mode [ 142.134642][ T311] hsr_slave_1: left promiscuous mode [ 142.159612][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.205621][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.232591][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.260808][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.366958][ T7759] netlink: 100 bytes leftover after parsing attributes in process `syz.0.543'. [ 142.423190][ T311] veth1_macvtap: left promiscuous mode [ 142.459585][ T311] veth0_macvtap: left promiscuous mode [ 142.465312][ T311] veth1_vlan: left promiscuous mode [ 142.505885][ T7700] Bluetooth: hci4: command 0x0405 tx timeout [ 142.506234][ T311] veth0_vlan: left promiscuous mode [ 142.666632][ T7461] Bluetooth: hci1: command tx timeout [ 143.217729][ T311] team0 (unregistering): Port device team_slave_1 removed [ 143.263557][ T311] team0 (unregistering): Port device team_slave_0 removed [ 143.731885][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 144.160833][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.185662][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.193002][ T7699] bridge_slave_0: entered allmulticast mode [ 144.216784][ T7699] bridge_slave_0: entered promiscuous mode [ 144.233356][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.254613][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.269185][ T7699] bridge_slave_1: entered allmulticast mode [ 144.277532][ T7699] bridge_slave_1: entered promiscuous mode [ 144.301183][ T7792] lo speed is unknown, defaulting to 1000 [ 144.429896][ T7799] lo speed is unknown, defaulting to 1000 [ 144.498003][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.569644][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.745701][ T7461] Bluetooth: hci1: command tx timeout [ 144.764768][ T7699] team0: Port device team_slave_0 added [ 144.771848][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 144.806162][ T7699] team0: Port device team_slave_1 added [ 144.907565][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.920323][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.959136][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.008499][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.024746][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.162542][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.204014][ T7810] Driver unsupported XDP return value 0 on prog (id 212) dev N/A, expect packet loss! [ 145.539485][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 145.642956][ T7816] dummy0: entered promiscuous mode [ 145.656269][ T7816] macvtap1: entered promiscuous mode [ 145.703996][ T7816] macvtap1: entered allmulticast mode [ 145.725870][ T7816] dummy0: entered allmulticast mode [ 145.768205][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 145.777465][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 145.787732][ T7827] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 145.798862][ T7820] dummy0: left allmulticast mode [ 145.804040][ T7820] dummy0: left promiscuous mode [ 145.813276][ T7827] netlink: 10 bytes leftover after parsing attributes in process `syz.3.563'. [ 145.859270][ T7699] hsr_slave_0: entered promiscuous mode [ 145.880428][ T7699] hsr_slave_1: entered promiscuous mode [ 145.886925][ T7699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.908643][ T7699] Cannot create hsr debugfs directory [ 145.954430][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 146.073881][ T7836] netlink: 'syz.1.564': attribute type 27 has an invalid length. [ 146.087525][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.566'. [ 146.150242][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 146.170248][ T7832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.204822][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.214875][ T7838] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 146.279099][ T7841] vlan2: entered promiscuous mode [ 146.284206][ T7841] bond1: entered promiscuous mode [ 146.335490][ T7841] batadv1: entered promiscuous mode [ 146.482252][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 146.522236][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 146.828132][ T7700] Bluetooth: hci1: command tx timeout [ 146.835215][ T7854] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 146.892672][ T7854] macvlan3: entered promiscuous mode [ 146.925855][ T7854] bridge0: entered promiscuous mode [ 146.932012][ T7854] bridge0: port 4(macvlan3) entered blocking state [ 146.955727][ T7854] bridge0: port 4(macvlan3) entered disabled state [ 146.962524][ T7854] macvlan3: entered allmulticast mode [ 146.990030][ T7854] bridge0: entered allmulticast mode [ 147.008664][ T7854] macvlan3: left allmulticast mode [ 147.025889][ T7854] bridge0: left allmulticast mode [ 147.033152][ T7854] bridge0: left promiscuous mode [ 147.324838][ T7699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.354002][ T7699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.404020][ T7699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.442122][ T7699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.608268][ T7875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.619131][ T7875] bond2: entered promiscuous mode [ 147.624430][ T7875] bond2: entered allmulticast mode [ 147.630612][ T7875] team0: Failed to send port change of device bond2 via netlink (err -105) [ 147.643754][ T7875] team0: Failed to send options change via netlink (err -105) [ 147.663172][ T7875] team0: Port device bond2 added [ 147.704234][ T7880] lo speed is unknown, defaulting to 1000 [ 147.874357][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.942935][ T35] team0: Failed to send port change of device bond2 via netlink (err -105) [ 147.999876][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.049588][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.056832][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.087582][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.094795][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.219245][ T7699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.250940][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.509371][ T7900] bond0: entered promiscuous mode [ 148.515012][ T7900] bond_slave_1: entered promiscuous mode [ 148.657842][ T7902] dummy0: entered promiscuous mode [ 148.684428][ T7902] macvtap2: entered promiscuous mode [ 148.706438][ T7902] macvtap2: entered allmulticast mode [ 148.721953][ T7902] dummy0: entered allmulticast mode [ 148.755296][ T7907] dummy0: left allmulticast mode [ 148.805679][ T7907] dummy0: left promiscuous mode [ 148.906032][ T7700] Bluetooth: hci1: command tx timeout [ 148.929765][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.994121][ T7914] lo speed is unknown, defaulting to 1000 [ 149.001772][ T7914] lo speed is unknown, defaulting to 1000 [ 149.037098][ T7914] lo speed is unknown, defaulting to 1000 [ 149.120012][ T7914] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.148038][ T7917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.200698][ T7699] veth0_vlan: entered promiscuous mode [ 149.243791][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.267311][ T7919] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 149.301220][ T7914] lo speed is unknown, defaulting to 1000 [ 149.317027][ T7699] veth1_vlan: entered promiscuous mode [ 149.337986][ T7914] lo speed is unknown, defaulting to 1000 [ 149.362626][ T7917] vlan3: entered promiscuous mode [ 149.375709][ T7917] bond2: entered promiscuous mode [ 149.380787][ T7917] batadv1: entered promiscuous mode [ 149.417478][ T7914] lo speed is unknown, defaulting to 1000 [ 149.440822][ T7914] lo speed is unknown, defaulting to 1000 [ 149.456385][ T7914] lo speed is unknown, defaulting to 1000 [ 149.496126][ T7914] lo speed is unknown, defaulting to 1000 [ 149.497545][ T7699] veth0_macvtap: entered promiscuous mode [ 149.549080][ T7699] veth1_macvtap: entered promiscuous mode [ 149.614481][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.655505][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.677672][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.700073][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.712089][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.770318][ T7932] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 149.779373][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.800398][ T7932] __nla_validate_parse: 13 callbacks suppressed [ 149.800418][ T7932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.598'. [ 149.813468][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.842398][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.860413][ T7932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.598'. [ 149.863857][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.897603][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.599'. [ 149.901661][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.934509][ T7940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 149.938996][ T7932] bridge0: entered promiscuous mode [ 149.950602][ T7932] macvlan2: entered promiscuous mode [ 149.957939][ T7932] bridge0: port 3(macvlan2) entered blocking state [ 149.965135][ T7932] bridge0: port 3(macvlan2) entered disabled state [ 149.972159][ T7932] macvlan2: entered allmulticast mode [ 149.978532][ T7932] bridge0: entered allmulticast mode [ 149.993694][ T7932] macvlan2: left allmulticast mode [ 149.999480][ T7932] bridge0: left allmulticast mode [ 150.006765][ T7932] bridge0: left promiscuous mode [ 150.042157][ T7934] tap0: tun_chr_ioctl cmd 1074025677 [ 150.049740][ T7934] tap0: linktype set to 778 [ 150.059075][ T7699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.073074][ T7699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.096753][ T7699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.117726][ T7699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.316717][ T7949] netlink: 'syz.4.604': attribute type 39 has an invalid length. [ 150.387464][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 150.446944][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 150.465699][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.473660][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.478859][ T7955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.593272][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.605'. [ 150.599129][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 150.611615][ T7955] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 150.668198][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 150.669083][ T7960] vlan4: entered promiscuous mode [ 150.705641][ T7960] bond3: entered promiscuous mode [ 150.716833][ T7960] batadv2: entered promiscuous mode [ 150.747961][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.758241][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.809902][ T7962] lo speed is unknown, defaulting to 1000 [ 150.831023][ T7962] lo speed is unknown, defaulting to 1000 [ 150.909164][ T7969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.986031][ T7085] Bluetooth: hci1: command tx timeout [ 151.205949][ T7980] lo speed is unknown, defaulting to 1000 [ 151.213929][ T7980] lo speed is unknown, defaulting to 1000 [ 151.403271][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 151.498518][ T7962] lo speed is unknown, defaulting to 1000 [ 151.526575][ T7962] lo speed is unknown, defaulting to 1000 [ 151.558475][ T7989] lo speed is unknown, defaulting to 1000 [ 151.576965][ T7989] lo speed is unknown, defaulting to 1000 [ 152.028836][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 152.599034][ T8014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.619894][ T8003] lo speed is unknown, defaulting to 1000 [ 152.633849][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.657342][ T8017] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 152.705918][ T8018] vlan3: entered promiscuous mode [ 152.723849][ T8018] bond2: entered promiscuous mode [ 152.735561][ T8018] batadv0: entered promiscuous mode [ 152.838570][ T8003] lo speed is unknown, defaulting to 1000 [ 152.901319][ T8010] lo speed is unknown, defaulting to 1000 [ 152.972332][ T8010] lo speed is unknown, defaulting to 1000 [ 153.024915][ T8027] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.065648][ T7085] Bluetooth: hci1: command 0x0405 tx timeout [ 153.430264][ T8034] netlink: 'syz.0.626': attribute type 5 has an invalid length. [ 153.485267][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.621813][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.707363][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.786780][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.903106][ T2960] bridge_slave_1: left allmulticast mode [ 153.909062][ T2960] bridge_slave_1: left promiscuous mode [ 153.916301][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.925996][ T2960] bridge_slave_0: left allmulticast mode [ 153.931684][ T2960] bridge_slave_0: left promiscuous mode [ 153.937606][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.240389][ T8045] netlink: 'syz.1.628': attribute type 21 has an invalid length. [ 154.270687][ T8043] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 154.479731][ T8054] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 154.721438][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.747057][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.760625][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.767627][ T2960] bond0 (unregistering): Released all slaves [ 154.775921][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.785180][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.794786][ T8045] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 154.803497][ T8045] netlink: 'syz.1.628': attribute type 5 has an invalid length. [ 154.812268][ T8045] __nla_validate_parse: 9 callbacks suppressed [ 154.812284][ T8045] netlink: 3 bytes leftover after parsing attributes in process `syz.1.628'. [ 154.817322][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.839674][ T8054] bridge0: entered promiscuous mode [ 154.846909][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.852193][ T8054] macvlan2: entered promiscuous mode [ 154.859952][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.874112][ T8054] bridge0: port 3(macvlan2) entered blocking state [ 154.889854][ T8054] bridge0: port 3(macvlan2) entered disabled state [ 154.905276][ T8054] macvlan2: entered allmulticast mode [ 154.918985][ T8054] bridge0: entered allmulticast mode [ 154.933252][ T8054] macvlan2: left allmulticast mode [ 154.950014][ T8054] bridge0: left allmulticast mode [ 154.967416][ T8054] bridge0: left promiscuous mode [ 155.109064][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 155.223475][ T8059] lo speed is unknown, defaulting to 1000 [ 155.241891][ T8068] TCP: TCP_TX_DELAY enabled [ 155.311675][ T8059] lo speed is unknown, defaulting to 1000 [ 155.464198][ T8074] lo speed is unknown, defaulting to 1000 [ 155.531953][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.535577][ T8074] lo speed is unknown, defaulting to 1000 [ 155.599022][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.695796][ T2960] hsr_slave_0: left promiscuous mode [ 155.705936][ T2960] hsr_slave_1: left promiscuous mode [ 155.711986][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.723074][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.740856][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.748859][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.760326][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.821605][ T2960] veth1_macvtap: left promiscuous mode [ 155.835601][ T2960] veth0_macvtap: left promiscuous mode [ 155.849266][ T2960] veth1_vlan: left promiscuous mode [ 155.863765][ T2960] veth0_vlan: left promiscuous mode [ 156.095504][ T8086] netlink: 'syz.3.640': attribute type 11 has an invalid length. [ 156.347973][ T7706] Bluetooth: hci4: command 0x0405 tx timeout [ 156.459969][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 156.544614][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 156.910315][ T7700] Bluetooth: hci1: command tx timeout [ 156.979838][ T8084] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 157.050815][ T8091] lo speed is unknown, defaulting to 1000 [ 157.074960][ T8091] lo speed is unknown, defaulting to 1000 [ 157.088135][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 157.556189][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.563342][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.572534][ T8059] bridge_slave_0: entered allmulticast mode [ 157.580325][ T8059] bridge_slave_0: entered promiscuous mode [ 157.588501][ T8103] lo speed is unknown, defaulting to 1000 [ 157.595228][ T8103] lo speed is unknown, defaulting to 1000 [ 157.608843][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.620864][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.639432][ T8059] bridge_slave_1: entered allmulticast mode [ 157.660698][ T8059] bridge_slave_1: entered promiscuous mode [ 157.744408][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.823760][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.918637][ T8059] team0: Port device team_slave_0 added [ 157.948207][ T8059] team0: Port device team_slave_1 added [ 158.001051][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.014089][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.058654][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.085221][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.092582][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.119791][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.235461][ T8059] hsr_slave_0: entered promiscuous mode [ 158.252298][ T8059] hsr_slave_1: entered promiscuous mode [ 158.266840][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.283662][ T8059] Cannot create hsr debugfs directory [ 158.666950][ T8133] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 158.708880][ T8133] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 158.716682][ T8133] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 158.734880][ T8133] team0: Port device netdevsim0 added [ 158.812389][ T8133] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 158.825325][ T8136] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 158.840827][ T8136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.651'. [ 158.861376][ T8133] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 158.876679][ T8136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.651'. [ 158.893757][ T8133] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 158.953550][ T8136] bridge0: entered promiscuous mode [ 158.959891][ T8136] macvlan2: entered promiscuous mode [ 158.985978][ T7706] Bluetooth: hci1: command tx timeout [ 158.987143][ T8136] bridge0: port 3(macvlan2) entered blocking state [ 159.021425][ T8136] bridge0: port 3(macvlan2) entered disabled state [ 159.028723][ T8136] macvlan2: entered allmulticast mode [ 159.034368][ T8136] bridge0: entered allmulticast mode [ 159.045044][ T8136] macvlan2: left allmulticast mode [ 159.063511][ T8136] bridge0: left allmulticast mode [ 159.077916][ T8136] bridge0: left promiscuous mode [ 159.300738][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 159.445860][ T8153] pimreg3: entered allmulticast mode [ 159.497163][ T8059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.513689][ T8059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.513825][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 159.543408][ T8059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.567427][ T8059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.593841][ T8155] tipc: Started in network mode [ 159.615562][ T8155] tipc: Node identity 080211000001, cluster identity 4711 [ 159.641415][ T8155] tipc: Enabled bearer , priority 0 [ 159.771399][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.792463][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.810701][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.817888][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.853935][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.861160][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.888529][ T8059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.899873][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.059421][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'. [ 160.118855][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.184413][ T8059] veth0_vlan: entered promiscuous mode [ 160.204552][ T8059] veth1_vlan: entered promiscuous mode [ 160.240425][ T8059] veth0_macvtap: entered promiscuous mode [ 160.273754][ T8059] veth1_macvtap: entered promiscuous mode [ 160.341851][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.376848][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.393242][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.409847][ T8172] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 160.417834][ T8172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.429194][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.441295][ T8172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.452358][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.460642][ T8174] 8021q: VLANs not supported on sit0 [ 160.483345][ T8172] bridge0: entered promiscuous mode [ 160.489483][ T8172] macvlan2: entered promiscuous mode [ 160.527315][ T8172] bridge0: port 3(macvlan2) entered blocking state [ 160.543216][ T8172] bridge0: port 3(macvlan2) entered disabled state [ 160.561545][ T8172] macvlan2: entered allmulticast mode [ 160.568102][ T8172] bridge0: entered allmulticast mode [ 160.587406][ T8172] macvlan2: left allmulticast mode [ 160.593675][ T8172] bridge0: left allmulticast mode [ 160.601422][ T8172] bridge0: left promiscuous mode [ 160.647739][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.659180][ T8177] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 160.659261][ T5885] tipc: Node number set to 134418688 [ 160.668611][ T8177] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 160.681836][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.692861][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.705894][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.714940][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.731700][ T8177] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 160.741085][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.769756][ T8059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.795118][ T8059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.822927][ T8059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.845733][ T8059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.000192][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 161.024592][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.056815][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.065789][ T7706] Bluetooth: hci1: command 0x040f tx timeout [ 161.141325][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.144920][ T8186] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 161.155458][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.192790][ T8186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.253701][ T8192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.278539][ T8192] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.292874][ T8192] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.587025][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 161.612683][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 161.655316][ T8203] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 161.663412][ T8203] netlink: 10 bytes leftover after parsing attributes in process `syz.3.675'. [ 161.730332][ T8209] tun0: tun_chr_ioctl cmd 1074025677 [ 161.736389][ T8209] tun0: linktype set to 512 [ 162.515797][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 162.697507][ T8239] netlink: 144 bytes leftover after parsing attributes in process `syz.4.684'. [ 162.775722][ T8243] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 162.794826][ T8243] netlink: 224 bytes leftover after parsing attributes in process `syz.1.686'. [ 162.836857][ T8243] macvlan0: entered promiscuous mode [ 162.842220][ T8243] bridge0: entered promiscuous mode [ 162.851495][ T8243] vlan4: entered promiscuous mode [ 162.857708][ T8243] bond0: entered promiscuous mode [ 162.864872][ T8243] bridge0: port 2(macvlan0) entered blocking state [ 162.876000][ T8243] bridge0: port 2(macvlan0) entered disabled state [ 162.902187][ T8243] macvlan0: entered allmulticast mode [ 162.908528][ T8243] bridge0: entered allmulticast mode [ 162.927765][ T8243] macvlan0: left allmulticast mode [ 162.933180][ T8243] bridge0: left allmulticast mode [ 162.944163][ T8243] bridge0: left promiscuous mode [ 162.954868][ T8243] vlan4: left promiscuous mode [ 162.961342][ T8243] bond0: left promiscuous mode [ 162.992236][ T8251] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 163.146909][ T8256] Bluetooth: hci1: command 0x040f tx timeout [ 163.312999][ T8260] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 163.675753][ T2927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.862907][ T2927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.956529][ T2927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.053542][ T2927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.183896][ T2927] bridge_slave_1: left allmulticast mode [ 164.205619][ T2927] bridge_slave_1: left promiscuous mode [ 164.213092][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.232704][ T2927] bridge_slave_0: left allmulticast mode [ 164.245245][ T2927] bridge_slave_0: left promiscuous mode [ 164.255633][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.614033][ T8278] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 164.947247][ T8295] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 165.164999][ T7700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.177535][ T7700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.190142][ T7700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.200234][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.217683][ T7700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.228526][ T7700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.237390][ T7700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.261726][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.274713][ T2927] bond0 (unregistering): Released all slaves [ 165.339161][ T8295] bridge0: entered promiscuous mode [ 165.344487][ T8295] macvlan2: entered promiscuous mode [ 165.356513][ T8295] bridge0: port 3(macvlan2) entered blocking state [ 165.363535][ T8295] bridge0: port 3(macvlan2) entered disabled state [ 165.370630][ T8295] macvlan2: entered allmulticast mode [ 165.384058][ T8295] bridge0: entered allmulticast mode [ 165.397917][ T8295] macvlan2: left allmulticast mode [ 165.422229][ T8295] bridge0: left allmulticast mode [ 165.438460][ T8295] bridge0: left promiscuous mode [ 165.612166][ T8300] __nla_validate_parse: 9 callbacks suppressed [ 165.612189][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 165.692909][ T8306] openvswitch: netlink: IP tunnel dst address not specified [ 165.750645][ T8297] lo speed is unknown, defaulting to 1000 [ 165.922278][ T8297] lo speed is unknown, defaulting to 1000 [ 166.038249][ T8318] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.155821][ T2927] hsr_slave_0: left promiscuous mode [ 166.195988][ T2927] hsr_slave_1: left promiscuous mode [ 166.202032][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.235653][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.266534][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.274015][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.373405][ T2927] veth1_macvtap: left promiscuous mode [ 166.385574][ T2927] veth0_macvtap: left promiscuous mode [ 166.396893][ T2927] veth1_vlan: left promiscuous mode [ 166.407983][ T2927] veth0_vlan: left promiscuous mode [ 166.445223][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 166.472198][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 166.496449][ T8339] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 166.520420][ T8339] netlink: 10 bytes leftover after parsing attributes in process `syz.4.711'. [ 166.814819][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 167.058948][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 167.114516][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 167.305910][ T8061] Bluetooth: hci1: command tx timeout [ 167.695464][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 167.886770][ T8359] netlink: 100 bytes leftover after parsing attributes in process `syz.4.716'. [ 168.010741][ T8356] lo speed is unknown, defaulting to 1000 [ 168.073519][ T8356] lo speed is unknown, defaulting to 1000 [ 168.179751][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 168.262484][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 168.295846][ T8373] xt_TCPMSS: Only works on TCP SYN packets [ 168.382769][ T8375] vlan3: entered allmulticast mode [ 168.596936][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.623974][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 168.624649][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.642608][ T8297] bridge_slave_0: entered allmulticast mode [ 168.650462][ T8297] bridge_slave_0: entered promiscuous mode [ 168.666979][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.684452][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.692954][ T8297] bridge_slave_1: entered allmulticast mode [ 168.704183][ T8297] bridge_slave_1: entered promiscuous mode [ 168.826607][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.868613][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.035758][ T8297] team0: Port device team_slave_0 added [ 169.044012][ T8297] team0: Port device team_slave_1 added [ 169.145754][ T8402] netlink: 100 bytes leftover after parsing attributes in process `syz.1.729'. [ 169.218083][ T8400] sit0: entered promiscuous mode [ 169.229877][ T8400] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 169.385679][ T8061] Bluetooth: hci1: command tx timeout [ 169.539504][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.556046][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.603524][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.634195][ T8407] team0: Refused to change device type [ 169.703218][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.747676][ T8404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.757136][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.764127][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.797988][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.818755][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 169.828625][ T8412] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 169.841496][ T8414] vlan5: entered promiscuous mode [ 169.847072][ T8414] bond4: entered promiscuous mode [ 169.852135][ T8414] batadv3: entered promiscuous mode [ 169.915167][ T8416] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 169.991372][ T8416] macvlan0: entered promiscuous mode [ 170.005802][ T8416] bridge0: entered promiscuous mode [ 170.018806][ T8416] vlan4: entered promiscuous mode [ 170.038834][ T8416] bond0: entered promiscuous mode [ 170.046582][ T8416] bridge0: port 2(macvlan0) entered blocking state [ 170.067169][ T8416] bridge0: port 2(macvlan0) entered disabled state [ 170.074039][ T8416] macvlan0: entered allmulticast mode [ 170.106182][ T8416] bridge0: entered allmulticast mode [ 170.120507][ T8416] macvlan0: left allmulticast mode [ 170.139801][ T8416] bridge0: left allmulticast mode [ 170.148094][ T8416] bridge0: left promiscuous mode [ 170.153163][ T8416] vlan4: left promiscuous mode [ 170.158401][ T8416] bond0: left promiscuous mode [ 170.194414][ T8297] hsr_slave_0: entered promiscuous mode [ 170.201367][ T8297] hsr_slave_1: entered promiscuous mode [ 170.208182][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.216173][ T8297] Cannot create hsr debugfs directory [ 170.391611][ T8426] batadv0: entered promiscuous mode [ 170.415901][ T8426] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 170.424077][ T8426] batadv0: left promiscuous mode [ 170.688691][ T8433] lo speed is unknown, defaulting to 1000 [ 170.702765][ T8433] lo speed is unknown, defaulting to 1000 [ 170.881150][ T8445] __nla_validate_parse: 7 callbacks suppressed [ 170.881171][ T8445] netlink: 100 bytes leftover after parsing attributes in process `syz.3.742'. [ 171.193016][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 171.231162][ T8452] nbd: nbd0 already in use [ 171.263084][ T8297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.263322][ T8452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.744'. [ 171.319424][ T8297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.333441][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 171.352596][ T8297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.389943][ T8297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.465760][ T8420] Bluetooth: hci1: command tx timeout [ 171.573141][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'. [ 171.589164][ T8466] batadv0: entered promiscuous mode [ 171.636065][ T8466] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 171.660589][ T8466] batadv0: left promiscuous mode [ 172.171994][ T8478] ax25_connect(): syz.1.752 uses autobind, please contact jreuter@yaina.de [ 173.547852][ T8420] Bluetooth: hci1: command 0x0419 tx timeout [ 173.905083][ T8472] netlink: 56 bytes leftover after parsing attributes in process `syz.1.752'. [ 173.930545][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 173.942259][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 173.964636][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 173.982961][ T8482] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.065434][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.095884][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.110962][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.127174][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.154503][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.168668][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.175854][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.227078][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.234255][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.269307][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.299924][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.329362][ T8482] syzkaller0 speed is unknown, defaulting to 1000 [ 174.466070][ T8506] netlink: 'syz.1.760': attribute type 21 has an invalid length. [ 174.497801][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 174.567855][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 174.589437][ T8506] netlink: 140 bytes leftover after parsing attributes in process `syz.1.760'. [ 174.769762][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.783728][ T8523] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 174.917827][ T8297] veth0_vlan: entered promiscuous mode [ 174.928912][ T8536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 174.961715][ T8297] veth1_vlan: entered promiscuous mode [ 175.033514][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 175.046079][ T8536] netlink: 'syz.0.766': attribute type 11 has an invalid length. [ 175.119745][ T8297] veth0_macvtap: entered promiscuous mode [ 175.157994][ T8297] veth1_macvtap: entered promiscuous mode [ 175.205207][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.249737][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.270185][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.303943][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.337403][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.356917][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.394266][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.425465][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.472219][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.506491][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.526146][ T8554] 8021q: VLANs not supported on ip6tnl0 [ 175.562637][ T8297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.587237][ T8297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.613334][ T8297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.625912][ T8061] Bluetooth: hci1: command 0x0419 tx timeout [ 175.655443][ T8297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.902634][ T8572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.984142][ T8577] __nla_validate_parse: 5 callbacks suppressed [ 175.984163][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.778'. [ 176.022185][ T8572] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 176.044239][ T8572] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 176.148464][ T8570] syzkaller0: entered promiscuous mode [ 176.164575][ T8570] syzkaller0: entered allmulticast mode [ 176.339678][ T8577] vlan3: entered promiscuous mode [ 176.346379][ T8577] bond4: entered promiscuous mode [ 176.351469][ T8577] batadv2: entered promiscuous mode [ 176.494065][ T8585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 176.694831][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.704011][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.713441][ T8591] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 176.721352][ T8591] netlink: 10 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.846637][ T8594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.785'. [ 176.926095][ T8595] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 176.933858][ T8595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.785'. [ 178.821586][ T8607] netlink: 'syz.3.788': attribute type 2 has an invalid length. [ 178.838775][ T8607] netlink: 'syz.3.788': attribute type 8 has an invalid length. [ 178.847245][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.788'. [ 179.007712][ T8590] lo speed is unknown, defaulting to 1000 [ 179.015959][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 179.027316][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.035967][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.052159][ T8612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.789'. [ 179.133968][ T8590] lo speed is unknown, defaulting to 1000 [ 179.157798][ T8612] macvlan0: entered promiscuous mode [ 179.176787][ T8612] bridge0: entered promiscuous mode [ 179.182057][ T8612] vlan4: entered promiscuous mode [ 179.196387][ T8612] bond0: entered promiscuous mode [ 179.207205][ T8612] bridge0: port 2(macvlan0) entered blocking state [ 179.214378][ T8612] bridge0: port 2(macvlan0) entered disabled state [ 179.222146][ T8612] macvlan0: entered allmulticast mode [ 179.229262][ T8612] bridge0: entered allmulticast mode [ 179.239553][ T8612] macvlan0: left allmulticast mode [ 179.246692][ T8616] tipc: Can't bind to reserved service type 1 [ 179.277366][ T8612] bridge0: left allmulticast mode [ 179.284275][ T8612] bridge0: left promiscuous mode [ 179.289711][ T8612] vlan4: left promiscuous mode [ 179.294877][ T8612] bond0: left promiscuous mode [ 179.316561][ T8590] syzkaller0 speed is unknown, defaulting to 1000 [ 179.446094][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.463720][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.528054][ T8623] veth0: entered promiscuous mode [ 179.536662][ T8623] veth0: left promiscuous mode [ 179.640137][ T8628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.663743][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 179.672929][ T8628] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 179.726872][ T8628] vlan4: entered promiscuous mode [ 179.731964][ T8628] bond3: entered promiscuous mode [ 179.762433][ T8628] batadv2: entered promiscuous mode [ 180.149527][ T6344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.331350][ T6344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.413920][ T6344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.493032][ T6344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.595863][ T6344] bridge_slave_1: left allmulticast mode [ 180.601567][ T6344] bridge_slave_1: left promiscuous mode [ 180.607692][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.619397][ T6344] bridge_slave_0: left allmulticast mode [ 180.625093][ T6344] bridge_slave_0: left promiscuous mode [ 180.631439][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.070855][ T8648] __nla_validate_parse: 3 callbacks suppressed [ 181.070876][ T8648] netlink: 100 bytes leftover after parsing attributes in process `syz.0.796'. [ 181.166274][ T6344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.190561][ T8644] nftables ruleset with unbound set [ 181.268183][ T6344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.298648][ T6344] bond0 (unregistering): Released all slaves [ 181.310207][ T8644] netlink: 9 bytes leftover after parsing attributes in process `syz.3.798'. [ 181.318672][ T8657] netlink: 48 bytes leftover after parsing attributes in process `syz.0.802'. [ 181.364928][ T8644] gretap0: entered promiscuous mode [ 181.388896][ T8657] macvlan3: entered promiscuous mode [ 181.415613][ T8657] bridge0: entered promiscuous mode [ 181.433253][ T8657] bridge0: port 4(macvlan3) entered blocking state [ 181.446651][ T8657] bridge0: port 4(macvlan3) entered disabled state [ 181.466413][ T8657] macvlan3: entered allmulticast mode [ 181.475845][ T8657] bridge0: entered allmulticast mode [ 181.517120][ T8657] macvlan3: left allmulticast mode [ 181.536273][ T8657] bridge0: left allmulticast mode [ 181.562665][ T8657] bridge0: left promiscuous mode [ 181.569976][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 181.732122][ T8256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.742066][ T8256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.751066][ T8256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.759575][ T8256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.772228][ T8256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.796495][ T8256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.820958][ T8675] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 181.829222][ T8675] netlink: 'syz.4.805': attribute type 2 has an invalid length. [ 181.946364][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.807'. [ 181.950887][ T8671] lo speed is unknown, defaulting to 1000 [ 181.969509][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 182.049002][ T8671] lo speed is unknown, defaulting to 1000 [ 182.071606][ T8671] syzkaller0 speed is unknown, defaulting to 1000 [ 182.226048][ T8693] netlink: 48 bytes leftover after parsing attributes in process `syz.0.810'. [ 182.319563][ T6344] hsr_slave_0: left promiscuous mode [ 182.339292][ T6344] hsr_slave_1: left promiscuous mode [ 182.352059][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.364458][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.386302][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.396601][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.487663][ T6344] veth1_macvtap: left promiscuous mode [ 182.508179][ T6344] veth0_macvtap: left promiscuous mode [ 182.536342][ T6344] veth1_vlan: left promiscuous mode [ 182.542019][ T6344] veth0_vlan: left promiscuous mode [ 182.563617][ T8703] netlink: 100 bytes leftover after parsing attributes in process `syz.1.812'. [ 182.833951][ T8705] netlink: 'syz.1.813': attribute type 2 has an invalid length. [ 183.659113][ T6344] team0 (unregistering): Port device team_slave_1 removed [ 183.820566][ T6344] team0 (unregistering): Port device team_slave_0 removed [ 183.865556][ T8256] Bluetooth: hci1: command tx timeout [ 183.928620][ T8713] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 184.180509][ T8718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.817'. [ 184.802145][ T8693] macvlan3: entered promiscuous mode [ 184.836223][ T8693] bridge0: entered promiscuous mode [ 184.842119][ T8693] bridge0: port 4(macvlan3) entered blocking state [ 184.867385][ T8693] bridge0: port 4(macvlan3) entered disabled state [ 184.874145][ T8693] macvlan3: entered allmulticast mode [ 184.895766][ T8693] bridge0: entered allmulticast mode [ 184.934723][ T8693] macvlan3: left allmulticast mode [ 184.940180][ T8693] bridge0: left allmulticast mode [ 184.946744][ T8693] bridge0: left promiscuous mode [ 184.988188][ T8718] macvlan0: entered promiscuous mode [ 184.999760][ T8718] bridge0: entered promiscuous mode [ 185.019527][ T8718] vlan4: entered promiscuous mode [ 185.036626][ T8718] bond0: entered promiscuous mode [ 185.048839][ T8718] bridge0: port 2(macvlan0) entered blocking state [ 185.066414][ T8718] bridge0: port 2(macvlan0) entered disabled state [ 185.074582][ T8718] macvlan0: entered allmulticast mode [ 185.080308][ T8718] bridge0: entered allmulticast mode [ 185.087509][ T8718] macvlan0: left allmulticast mode [ 185.092666][ T8718] bridge0: left allmulticast mode [ 185.099717][ T8718] bridge0: left promiscuous mode [ 185.104747][ T8718] vlan4: left promiscuous mode [ 185.109819][ T8718] bond0: left promiscuous mode [ 185.141555][ T8722] netlink: 'syz.4.818': attribute type 1 has an invalid length. [ 185.149841][ T8722] netlink: 'syz.4.818': attribute type 2 has an invalid length. [ 185.404883][ T8728] netlink: 56 bytes leftover after parsing attributes in process `syz.1.820'. [ 185.408553][ T8671] chnl_net:caif_netlink_parms(): no params data found [ 185.779343][ T8742] netlink: 'syz.1.824': attribute type 11 has an invalid length. [ 185.824026][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.831616][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.856968][ T8671] bridge_slave_0: entered allmulticast mode [ 185.882684][ T8671] bridge_slave_0: entered promiscuous mode [ 185.930677][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.945650][ T8256] Bluetooth: hci1: command 0x041b tx timeout [ 185.965915][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.992181][ T8671] bridge_slave_1: entered allmulticast mode [ 186.017785][ T8671] bridge_slave_1: entered promiscuous mode [ 186.096557][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.147520][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.243073][ T8671] team0: Port device team_slave_0 added [ 186.258826][ T8758] __nla_validate_parse: 1 callbacks suppressed [ 186.258845][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 186.295162][ T8671] team0: Port device team_slave_1 added [ 186.354060][ T8758] dummy0: entered promiscuous mode [ 186.360532][ T8758] macvtap2: entered promiscuous mode [ 186.375958][ T8758] macvtap2: entered allmulticast mode [ 186.381572][ T8758] dummy0: entered allmulticast mode [ 186.436702][ T8761] dummy0: left allmulticast mode [ 186.449742][ T8761] dummy0: left promiscuous mode [ 186.476060][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'. [ 186.507861][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.515054][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.561616][ T8671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.575965][ T8671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.583090][ T8671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.677238][ T8671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.766630][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 186.807998][ T8774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.834'. [ 186.873534][ T8671] hsr_slave_0: entered promiscuous mode [ 186.887845][ T8671] hsr_slave_1: entered promiscuous mode [ 186.901959][ T8671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.911794][ T8671] Cannot create hsr debugfs directory [ 186.992336][ T8780] lo speed is unknown, defaulting to 1000 [ 187.047463][ T8785] netlink: 'syz.1.837': attribute type 5 has an invalid length. [ 187.065846][ T8780] lo speed is unknown, defaulting to 1000 [ 187.072760][ T8780] syzkaller0 speed is unknown, defaulting to 1000 [ 187.102588][ T8785] : entered promiscuous mode [ 187.201395][ T8786] vlan5: entered promiscuous mode [ 187.448022][ T8794] lo speed is unknown, defaulting to 1000 [ 187.458117][ T8794] lo speed is unknown, defaulting to 1000 [ 187.466472][ T8794] syzkaller0 speed is unknown, defaulting to 1000 [ 187.736005][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.843'. [ 187.769231][ T8806] lo speed is unknown, defaulting to 1000 [ 187.852807][ T8806] lo speed is unknown, defaulting to 1000 [ 187.867350][ T8806] syzkaller0 speed is unknown, defaulting to 1000 [ 187.869121][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.844'. [ 188.025527][ T8256] Bluetooth: hci1: command 0x041b tx timeout [ 188.234353][ T8822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.848'. [ 188.330193][ T8671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.368446][ T8671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.547386][ T8671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.584258][ T8832] ip6tnl2: entered promiscuous mode [ 188.628355][ T8671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.694661][ T8830] lo speed is unknown, defaulting to 1000 [ 188.711603][ T8830] lo speed is unknown, defaulting to 1000 [ 188.754315][ T8830] syzkaller0 speed is unknown, defaulting to 1000 [ 189.058266][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 189.138887][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.157286][ T8855] siw: device registration error -23 [ 189.202031][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.240170][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.247364][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.276927][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.284077][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.339278][ T8859] netlink: 'syz.0.859': attribute type 4 has an invalid length. [ 189.368550][ T8857] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 189.498525][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.860'. [ 189.534782][ T8862] bridge0: entered promiscuous mode [ 189.540804][ T8862] macvlan2: entered promiscuous mode [ 189.549098][ T8862] bridge0: port 3(macvlan2) entered blocking state [ 189.556536][ T8862] bridge0: port 3(macvlan2) entered disabled state [ 189.563440][ T8862] macvlan2: entered allmulticast mode [ 189.579335][ T8862] bridge0: entered allmulticast mode [ 189.613003][ T8862] macvlan2: left allmulticast mode [ 189.618644][ T8862] bridge0: left allmulticast mode [ 189.625997][ T8862] bridge0: left promiscuous mode [ 189.665905][ T8866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'. [ 189.874627][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.917318][ T8880] batadv0: entered promiscuous mode [ 189.927540][ T8880] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 189.948495][ T8880] batadv0: left promiscuous mode [ 190.098656][ T8671] veth0_vlan: entered promiscuous mode [ 190.106002][ T8420] Bluetooth: hci1: command 0x041b tx timeout [ 190.135737][ T8671] veth1_vlan: entered promiscuous mode [ 190.171764][ T8671] veth0_macvtap: entered promiscuous mode [ 190.183364][ T8671] veth1_macvtap: entered promiscuous mode [ 190.205086][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.218620][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.228892][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.240277][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.252403][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.304516][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.317278][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.345168][ T8671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.372531][ T8671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.384325][ T8671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.404146][ T8891] siw: device registration error -23 [ 190.419725][ T8671] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.429919][ T8671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.439606][ T8671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.449309][ T8671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.476885][ T8892] lo speed is unknown, defaulting to 1000 [ 190.484511][ T8892] lo speed is unknown, defaulting to 1000 [ 190.533359][ T8892] syzkaller0 speed is unknown, defaulting to 1000 [ 190.584656][ T8895] netlink: 'syz.1.868': attribute type 34 has an invalid length. [ 190.924686][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.936548][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.021412][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.035192][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.159675][ T8912] sit0: entered promiscuous mode [ 191.169759][ T8912] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 191.187244][ T8913] netlink: 'syz.1.873': attribute type 4 has an invalid length. [ 191.540294][ T8921] __nla_validate_parse: 4 callbacks suppressed [ 191.540314][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.876'. [ 191.628094][ T8928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.878'. [ 191.723976][ T8932] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 191.732782][ T8932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.751625][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.880'. [ 191.771758][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 191.815815][ T8933] netlink: 'syz.4.879': attribute type 3 has an invalid length. [ 191.869890][ T8933] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.879119][ T8933] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.888011][ T8933] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.896889][ T8933] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.906117][ T8940] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 191.939057][ T8940] team0: Port device netdevsim0 added [ 191.945165][ T8938] siw: device registration error -23 [ 191.975874][ T8940] sctp: [Deprecated]: syz.1.882 (pid 8940) Use of int in max_burst socket option. [ 191.975874][ T8940] Use struct sctp_assoc_value instead [ 192.124412][ T6345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.409276][ T6345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.535132][ T6345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.614020][ T6345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.730906][ T6345] bridge_slave_1: left allmulticast mode [ 192.736805][ T6345] bridge_slave_1: left promiscuous mode [ 192.742626][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.753331][ T6345] bridge_slave_0: left allmulticast mode [ 192.759635][ T6345] bridge_slave_0: left promiscuous mode [ 192.765576][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.120069][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 193.650178][ T8256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.667785][ T8256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.690417][ T8256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.699113][ T8256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.715934][ T8256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.726469][ T8256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.736394][ T6345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.759306][ T6345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.781310][ T6345] bond0 (unregistering): Released all slaves [ 193.832733][ T8951] lo speed is unknown, defaulting to 1000 [ 193.890129][ T8951] lo speed is unknown, defaulting to 1000 [ 193.891932][ T8964] lo speed is unknown, defaulting to 1000 [ 193.897278][ T8951] syzkaller0 speed is unknown, defaulting to 1000 [ 193.957919][ T8964] lo speed is unknown, defaulting to 1000 [ 193.964613][ T8964] syzkaller0 speed is unknown, defaulting to 1000 [ 194.262503][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 194.372143][ T8983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.402174][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 194.453630][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 194.473130][ T8989] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 194.536598][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.622266][ T8983] vlan5: entered promiscuous mode [ 194.635529][ T8983] bond5: entered promiscuous mode [ 194.640613][ T8983] batadv4: entered promiscuous mode [ 194.828098][ T6345] hsr_slave_0: left promiscuous mode [ 194.836989][ T6345] hsr_slave_1: left promiscuous mode [ 194.852965][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.871096][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.905101][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.925910][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.008964][ T6345] veth1_macvtap: left promiscuous mode [ 195.019438][ T6345] veth0_macvtap: left promiscuous mode [ 195.025985][ T6345] veth1_vlan: left promiscuous mode [ 195.031778][ T6345] veth0_vlan: left promiscuous mode [ 195.281827][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.896'. [ 195.692798][ T6345] team0 (unregistering): Port device team_slave_1 removed [ 195.742520][ T6345] team0 (unregistering): Port device team_slave_0 removed [ 195.791795][ T8992] Bluetooth: hci1: command tx timeout [ 196.329958][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 196.589007][ T8992] Bluetooth: hci3: command 0x0406 tx timeout [ 196.595213][ T8992] Bluetooth: hci2: command 0x0406 tx timeout [ 196.646104][ T9010] netlink: 'syz.0.898': attribute type 4 has an invalid length. [ 196.679874][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.901'. [ 196.756518][ T9029] siw: device registration error -23 [ 196.785023][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.801916][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.810813][ T8964] bridge_slave_0: entered allmulticast mode [ 196.827180][ T8964] bridge_slave_0: entered promiscuous mode [ 196.909891][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 196.931661][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.975657][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.986504][ T8964] bridge_slave_1: entered allmulticast mode [ 197.000121][ T8964] bridge_slave_1: entered promiscuous mode [ 197.148107][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.176841][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.292934][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 197.402927][ T9042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.408580][ T9044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.902'. [ 197.434768][ T8964] team0: Port device team_slave_0 added [ 197.451599][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 197.468029][ T8964] team0: Port device team_slave_1 added [ 197.539110][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 197.578204][ T9048] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 197.617745][ T9042] vlan5: entered promiscuous mode [ 197.644363][ T9042] bond5: entered promiscuous mode [ 197.665732][ T9042] batadv3: entered promiscuous mode [ 197.709361][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.726750][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.770371][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.909'. [ 197.805041][ T8964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.849477][ T9056] batadv0: entered promiscuous mode [ 197.866589][ T8256] Bluetooth: hci1: command tx timeout [ 197.874336][ T9056] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 197.887570][ T9056] batadv0: left promiscuous mode [ 197.910654][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.918058][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.981983][ T8964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.177501][ T9065] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 198.247614][ T9065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.262631][ T9062] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 198.296503][ T9068] bond5: (slave bridge4): making interface the new active one [ 198.306744][ T9068] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 198.338880][ T8964] hsr_slave_0: entered promiscuous mode [ 198.345075][ T8964] hsr_slave_1: entered promiscuous mode [ 198.359358][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 198.386214][ T8964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.393797][ T8964] Cannot create hsr debugfs directory [ 198.448946][ T9065] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 198.654286][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.681879][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.914'. [ 198.706139][ T5885] lo speed is unknown, defaulting to 1000 [ 198.710138][ T9087] siw: device registration error -23 [ 198.718678][ T9086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.916'. [ 198.746567][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 199.122892][ T9097] trusted_key: syz.3.921 sent an empty control message without MSG_MORE. [ 199.232248][ T9101] batadv0: entered promiscuous mode [ 199.239325][ T9101] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 199.261361][ T9101] batadv0: left promiscuous mode [ 199.550374][ T9110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.566240][ T9110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.607493][ T9115] netlink: 'syz.4.927': attribute type 21 has an invalid length. [ 199.635253][ T9115] netlink: 'syz.4.927': attribute type 20 has an invalid length. [ 199.764653][ T9110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.800968][ T9110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.878998][ T8964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.886014][ T9119] lo speed is unknown, defaulting to 1000 [ 199.940732][ T8964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.945807][ T8256] Bluetooth: hci1: command tx timeout [ 199.991977][ T8964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.184507][ T9110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.214284][ T9110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.249494][ T8964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.256495][ T9119] lo speed is unknown, defaulting to 1000 [ 200.360322][ T9110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.385607][ T9110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.411505][ T9119] syzkaller0 speed is unknown, defaulting to 1000 [ 200.418226][ T9143] lo speed is unknown, defaulting to 1000 [ 200.647268][ T9110] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.667882][ T9110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.718823][ T9110] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.755609][ T9110] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.823911][ T9110] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.876961][ T9110] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.909576][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.957253][ T9110] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.005683][ T9110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.053172][ T8964] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.102663][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.109860][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.144509][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.151685][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.332555][ T9171] macvlan3: entered promiscuous mode [ 201.369970][ T9171] bridge0: entered promiscuous mode [ 201.416105][ T9171] bridge0: port 4(macvlan3) entered blocking state [ 201.445726][ T9171] bridge0: port 4(macvlan3) entered disabled state [ 201.452820][ T9171] macvlan3: entered allmulticast mode [ 201.460839][ T9171] bridge0: entered allmulticast mode [ 201.469525][ T9171] macvlan3: left allmulticast mode [ 201.477753][ T9171] bridge0: left allmulticast mode [ 201.504099][ T9171] bridge0: left promiscuous mode [ 201.553716][ T9182] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 201.623172][ T9183] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 201.628475][ T9187] dummy0: entered promiscuous mode [ 201.665751][ T9187] dummy0: entered allmulticast mode [ 201.735826][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.845951][ T9191] siw: device registration error -23 [ 201.905055][ T8964] veth0_vlan: entered promiscuous mode [ 201.929025][ T8964] veth1_vlan: entered promiscuous mode [ 202.028673][ T8256] Bluetooth: hci1: command tx timeout [ 202.078748][ T8964] veth0_macvtap: entered promiscuous mode [ 202.118901][ T8964] veth1_macvtap: entered promiscuous mode [ 202.142529][ T9199] __nla_validate_parse: 9 callbacks suppressed [ 202.142553][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 202.160171][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.172607][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.183359][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.227945][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.267221][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.276039][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 202.316154][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'. [ 202.362131][ T9199] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.394137][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 202.408118][ T9201] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 202.455800][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.499114][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.533379][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.568954][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.602233][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.624019][ T9216] netlink: 48 bytes leftover after parsing attributes in process `syz.1.958'. [ 202.626522][ T9207] vlan4: entered promiscuous mode [ 202.655830][ T9207] bond5: entered promiscuous mode [ 202.667146][ T9207] batadv3: entered promiscuous mode [ 202.730131][ T9214] netlink: 'syz.4.957': attribute type 4 has an invalid length. [ 202.767255][ T8964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.788952][ T8964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.808715][ T8964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.828713][ T8964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.848367][ T9216] macvlan0: entered promiscuous mode [ 202.853945][ T9216] bridge0: entered promiscuous mode [ 202.859816][ T9216] vlan4: entered promiscuous mode [ 202.865075][ T9216] bond0: entered promiscuous mode [ 202.881994][ T9216] bridge0: port 2(macvlan0) entered blocking state [ 202.931362][ T9216] bridge0: port 2(macvlan0) entered disabled state [ 202.942648][ T9216] macvlan0: entered allmulticast mode [ 202.948764][ T9216] bridge0: entered allmulticast mode [ 202.968091][ T9216] macvlan0: left allmulticast mode [ 202.973750][ T9216] bridge0: left allmulticast mode [ 202.990277][ T9216] bridge0: left promiscuous mode [ 202.996667][ T9216] vlan4: left promiscuous mode [ 203.001631][ T9216] bond0: left promiscuous mode [ 203.069653][ T9210] lo speed is unknown, defaulting to 1000 [ 203.153907][ T9210] lo speed is unknown, defaulting to 1000 [ 203.203795][ T9210] syzkaller0 speed is unknown, defaulting to 1000 [ 203.266452][ T6345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.283180][ T6345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.370179][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.378678][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.620722][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 203.922394][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.968'. [ 204.118053][ T9255] netlink: 'syz.4.970': attribute type 4 has an invalid length. [ 204.314825][ T9259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.972'. [ 204.336690][ T9261] netlink: 100 bytes leftover after parsing attributes in process `syz.3.973'. [ 204.367667][ T9259] bridge0: entered promiscuous mode [ 204.373297][ T9259] macvlan2: entered promiscuous mode [ 204.380435][ T9259] bridge0: port 3(macvlan2) entered blocking state [ 204.399510][ T9259] bridge0: port 3(macvlan2) entered disabled state [ 204.425222][ T9259] macvlan2: entered allmulticast mode [ 204.431444][ T9259] bridge0: entered allmulticast mode [ 204.448437][ T9259] macvlan2: left allmulticast mode [ 204.453632][ T9259] bridge0: left allmulticast mode [ 204.462083][ T9259] bridge0: left promiscuous mode [ 204.558900][ T9268] gretap0: left promiscuous mode [ 204.624693][ T9268] sit0: left promiscuous mode [ 204.691798][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.699367][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.834125][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.865816][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.996168][ T9268] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.005130][ T9268] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.030110][ T9268] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.050368][ T9268] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.123827][ T9268] vlan2: left promiscuous mode [ 205.129950][ T9268] vti0: left promiscuous mode [ 205.135802][ T9268] batadv0: left allmulticast mode [ 205.142263][ T9268] macvtap0: left promiscuous mode [ 205.147826][ T9268] macvtap0: left allmulticast mode [ 205.167520][ T9268] macvtap1: left promiscuous mode [ 205.172674][ T9268] macvtap1: left allmulticast mode [ 205.178315][ T9268] macvtap2: left promiscuous mode [ 205.183453][ T9268] macvtap2: left allmulticast mode [ 205.194130][ T9268] bond2: left promiscuous mode [ 205.199096][ T9268] batadv1: left promiscuous mode [ 205.204370][ T9268] vlan3: left promiscuous mode [ 205.220958][ T9268] bond3: left promiscuous mode [ 205.226099][ T9268] batadv2: left promiscuous mode [ 205.231400][ T9268] vlan4: left promiscuous mode [ 205.250336][ T9268] bond4: left promiscuous mode [ 205.255241][ T9268] batadv3: left promiscuous mode [ 205.275758][ T9268] vlan5: left promiscuous mode [ 205.326818][ T9272] lo speed is unknown, defaulting to 1000 [ 205.357955][ T9272] lo speed is unknown, defaulting to 1000 [ 205.364825][ T9272] syzkaller0 speed is unknown, defaulting to 1000 [ 205.558015][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 205.625526][ T8420] Bluetooth: hci1: command 0x0405 tx timeout [ 205.640089][ T9284] sctp: [Deprecated]: syz.3.981 (pid 9284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.640089][ T9284] Use struct sctp_sack_info instead [ 205.738237][ T9285] netlink: 'syz.3.981': attribute type 12 has an invalid length. [ 205.752272][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 205.792702][ T9285] netlink: 'syz.3.981': attribute type 29 has an invalid length. [ 205.902476][ T9291] batadv0: entered promiscuous mode [ 205.921660][ T9291] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 205.945325][ T9291] batadv0: left promiscuous mode [ 206.290910][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.409388][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.514441][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.599124][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.714540][ T35] bridge_slave_1: left allmulticast mode [ 206.720866][ T35] bridge_slave_1: left promiscuous mode [ 206.727038][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.738164][ T35] bridge_slave_0: left allmulticast mode [ 206.743976][ T35] bridge_slave_0: left promiscuous mode [ 206.750774][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.246520][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.268834][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.296955][ T35] bond0 (unregistering): Released all slaves [ 207.335772][ T9310] __nla_validate_parse: 2 callbacks suppressed [ 207.335791][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 207.406855][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 207.461733][ T9315] macvtap3: entered promiscuous mode [ 207.467699][ T9315] macvtap3: entered allmulticast mode [ 207.478664][ T9315] batadv0: entered allmulticast mode [ 207.512371][ T9315] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 207.578430][ T9318] batadv0: left allmulticast mode [ 207.902654][ T8256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.922757][ T8256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.931390][ T8256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.948315][ T8256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.975857][ T8256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.986274][ T8256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.016595][ T9334] siw: device registration error -23 [ 208.269781][ T35] hsr_slave_0: left promiscuous mode [ 208.292080][ T35] hsr_slave_1: left promiscuous mode [ 208.302351][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.310364][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.318961][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 208.330272][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.342382][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.364407][ T9348] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1000'. [ 208.373907][ T9348] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1000'. [ 208.405321][ T35] veth1_macvtap: left promiscuous mode [ 208.412156][ T35] veth0_macvtap: left promiscuous mode [ 208.443023][ T35] veth1_vlan: left promiscuous mode [ 208.454452][ T35] veth0_vlan: left promiscuous mode [ 209.063111][ T35] team0 (unregistering): Port device team_slave_1 removed [ 209.114291][ T35] team0 (unregistering): Port device team_slave_0 removed [ 209.599963][ T9330] lo speed is unknown, defaulting to 1000 [ 209.609217][ T9330] lo speed is unknown, defaulting to 1000 [ 209.640177][ T9348] vlan6: entered allmulticast mode [ 209.658499][ T9348] erspan0: entered allmulticast mode [ 209.677362][ T9330] syzkaller0 speed is unknown, defaulting to 1000 [ 209.789132][ T9358] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1002'. [ 209.798584][ T9358] nbd: must specify at least one socket [ 209.996075][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 210.047217][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1005'. [ 210.118279][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 210.125531][ T8256] Bluetooth: hci1: command tx timeout [ 210.147834][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.155560][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 210.162895][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 210.372702][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1009'. [ 210.623749][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 210.926031][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.943483][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.952263][ T9330] bridge_slave_0: entered allmulticast mode [ 210.967844][ T9330] bridge_slave_0: entered promiscuous mode [ 211.018780][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.041988][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.077116][ T9330] bridge_slave_1: entered allmulticast mode [ 211.103388][ T9330] bridge_slave_1: entered promiscuous mode [ 211.132306][ T9408] lo speed is unknown, defaulting to 1000 [ 211.245738][ T9408] lo speed is unknown, defaulting to 1000 [ 211.269305][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.298895][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.336152][ T9408] syzkaller0 speed is unknown, defaulting to 1000 [ 211.497201][ T9330] team0: Port device team_slave_0 added [ 211.516663][ T9330] team0: Port device team_slave_1 added [ 211.713276][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.728090][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.793845][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.820959][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.854037][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.909990][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.197719][ T8420] Bluetooth: hci1: command tx timeout [ 212.269422][ T9330] hsr_slave_0: entered promiscuous mode [ 212.288809][ T9330] hsr_slave_1: entered promiscuous mode [ 212.311776][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.333337][ T9330] Cannot create hsr debugfs directory [ 212.420121][ T9450] siw: device registration error -23 [ 212.633536][ T9458] __nla_validate_parse: 4 callbacks suppressed [ 212.633561][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 212.714902][ T9458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.747567][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 212.756361][ T9458] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 212.787330][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 212.808139][ T9458] vlan7: entered promiscuous mode [ 212.820556][ T9458] bond6: entered promiscuous mode [ 212.837289][ T9458] batadv4: entered promiscuous mode [ 213.058920][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 213.119534][ T9472] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 213.132731][ T9472] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 213.180495][ T9330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.219025][ T9330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.248902][ T9330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.289641][ T9330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.370333][ T9478] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1035'. [ 213.390789][ T9478] nbd: must specify at least one socket [ 213.488281][ T9476] syzkaller0: entered promiscuous mode [ 213.488738][ T9481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1036'. [ 213.493823][ T9476] syzkaller0: entered allmulticast mode [ 213.591558][ T9481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 213.657184][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 213.666900][ T9481] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1036'. [ 213.743742][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 214.273513][ T8420] Bluetooth: hci1: command 0x040f tx timeout [ 215.663818][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 215.960241][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.995013][ T9506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'. [ 216.027500][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.079623][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.086825][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.114115][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.121318][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.345743][ T8256] Bluetooth: hci1: command 0x040f tx timeout [ 216.482032][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.641424][ T9330] veth0_vlan: entered promiscuous mode [ 216.701373][ T9330] veth1_vlan: entered promiscuous mode [ 216.727594][ T9540] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 216.808673][ T9330] veth0_macvtap: entered promiscuous mode [ 216.830081][ T9330] veth1_macvtap: entered promiscuous mode [ 216.870517][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.885083][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.899719][ T9544] nbd: must specify at least one socket [ 216.924860][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.975032][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.010344][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.033612][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.056993][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.072060][ T9552] netlink: 'syz.0.1062': attribute type 4 has an invalid length. [ 217.094211][ T9330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.118156][ T9330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.142777][ T9330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.168576][ T9330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.357356][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.368576][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.448447][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.505429][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.780715][ T9576] vlan5: entered allmulticast mode [ 217.856930][ T9577] IPVS: Error connecting to the multicast addr [ 217.869369][ T9576] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 217.878640][ T9576] team0: left allmulticast mode [ 217.883676][ T9576] team_slave_0: left allmulticast mode [ 217.889577][ T9576] team_slave_1: left allmulticast mode [ 217.895150][ T9576] bond2: left allmulticast mode [ 217.901828][ T9576] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 217.914082][ T9582] __nla_validate_parse: 7 callbacks suppressed [ 217.914101][ T9582] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1072'. [ 217.931217][ T9582] nbd: must specify at least one socket [ 217.950157][ T9576] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9576, name: syz.0.1071 [ 217.971848][ T9576] preempt_count: 0, expected: 0 [ 217.990424][ T9576] RCU nest depth: 1, expected: 0 [ 218.000169][ T9576] 2 locks held by syz.0.1071/9576: [ 218.005467][ T9576] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 218.014838][ T9576] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 218.033854][ T9576] CPU: 1 UID: 0 PID: 9576 Comm: syz.0.1071 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 218.033886][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.033911][ T9576] Call Trace: [ 218.033919][ T9576] [ 218.033928][ T9576] dump_stack_lvl+0x241/0x360 [ 218.033958][ T9576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.033979][ T9576] ? __pfx__printk+0x10/0x10 [ 218.034012][ T9576] __might_resched+0x5d4/0x780 [ 218.034040][ T9576] ? dev_set_rx_mode+0x57/0x2e0 [ 218.034071][ T9576] ? __pfx___might_resched+0x10/0x10 [ 218.034099][ T9576] ? mark_lock+0x9a/0x360 [ 218.034128][ T9576] __mutex_lock+0x126/0x1010 [ 218.034159][ T9576] ? __pfx___dev_notify_flags+0x10/0x10 [ 218.034192][ T9576] ? dev_set_allmulti+0x11c/0x270 [ 218.034221][ T9576] ? netif_set_allmulti+0x224/0x380 [ 218.034250][ T9576] ? __pfx___mutex_lock+0x10/0x10 [ 218.034271][ T9576] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.034296][ T9576] ? __pfx_bond_set_rx_mode+0x10/0x10 [ 218.034325][ T9576] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 218.034348][ T9576] ? netif_set_allmulti+0x264/0x380 [ 218.034386][ T9576] dev_set_allmulti+0x11c/0x270 [ 218.034440][ T9576] team_change_rx_flags+0x1a8/0x330 [ 218.034467][ T9576] ? team_change_rx_flags+0x29/0x330 [ 218.034494][ T9576] ? __pfx_team_change_rx_flags+0x10/0x10 [ 218.034519][ T9576] netif_set_allmulti+0x20e/0x380 [ 218.034559][ T9576] dev_set_allmulti+0x143/0x270 [ 218.034604][ T9576] del_nbp+0xce/0xb40 [ 218.034633][ T9576] br_del_if+0x145/0x320 [ 218.034651][ T9576] ? br_del_slave+0x12/0x30 [ 218.034691][ T9576] do_set_master+0x349/0x730 [ 218.034729][ T9576] do_setlink+0xfee/0x40f0 [ 218.034784][ T9576] ? __pfx_do_setlink+0x10/0x10 [ 218.034827][ T9576] ? __pfx___might_resched+0x10/0x10 [ 218.034855][ T9576] ? __pfx___mutex_trylock_common+0x10/0x10 [ 218.034886][ T9576] ? rcu_is_watching+0x15/0xb0 [ 218.034908][ T9576] ? trace_contention_end+0x3c/0x120 [ 218.034930][ T9576] ? __mutex_lock+0x397/0x1010 [ 218.034955][ T9576] ? __pfx_aa_get_newest_label+0x10/0x10 [ 218.034990][ T9576] ? rtnl_newlink+0xc4c/0x1d90 [ 218.035018][ T9576] ? __pfx___mutex_lock+0x10/0x10 [ 218.035051][ T9576] ? ns_capable+0x8a/0xf0 [ 218.035075][ T9576] ? rtnl_link_get_net_capable+0x168/0x340 [ 218.035109][ T9576] rtnl_newlink+0x15a6/0x1d90 [ 218.035152][ T9576] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.035179][ T9576] ? __pfx_validate_chain+0x10/0x10 [ 218.035221][ T9576] ? validate_chain+0x11e/0x5920 [ 218.035241][ T9576] ? __pfx_lock_acquire+0x10/0x10 [ 218.035273][ T9576] ? __pfx_lock_release+0x10/0x10 [ 218.035305][ T9576] ? __pfx_validate_chain+0x10/0x10 [ 218.035327][ T9576] ? mark_lock+0x9a/0x360 [ 218.035349][ T9576] ? __lock_acquire+0x1397/0x2100 [ 218.035405][ T9576] ? __pfx_lock_release+0x10/0x10 [ 218.035449][ T9576] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.035477][ T9576] rtnetlink_rcv_msg+0x791/0xcf0 [ 218.035502][ T9576] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 218.035530][ T9576] ? __lock_acquire+0x1397/0x2100 [ 218.035559][ T9576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.035609][ T9576] netlink_rcv_skb+0x206/0x480 [ 218.035638][ T9576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.035665][ T9576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.035714][ T9576] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.035744][ T9576] netlink_unicast+0x7f6/0x990 [ 218.035777][ T9576] ? __pfx_netlink_unicast+0x10/0x10 [ 218.035799][ T9576] ? __virt_addr_valid+0x45f/0x530 [ 218.035818][ T9576] ? __phys_addr_symbol+0x2f/0x70 [ 218.035836][ T9576] ? __check_object_size+0x47a/0x730 [ 218.035867][ T9576] netlink_sendmsg+0x8de/0xcb0 [ 218.035907][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.035938][ T9576] ? aa_sock_msg_perm+0x91/0x160 [ 218.035972][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.035998][ T9576] __sock_sendmsg+0x221/0x270 [ 218.036027][ T9576] ____sys_sendmsg+0x53a/0x860 [ 218.036057][ T9576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.036075][ T9576] ? __fget_files+0x2a/0x410 [ 218.036106][ T9576] ? __fget_files+0x2a/0x410 [ 218.036143][ T9576] __sys_sendmsg+0x269/0x350 [ 218.036169][ T9576] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.036234][ T9576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.036265][ T9576] ? do_syscall_64+0x100/0x230 [ 218.036292][ T9576] ? do_syscall_64+0xb6/0x230 [ 218.036318][ T9576] do_syscall_64+0xf3/0x230 [ 218.036341][ T9576] ? clear_bhb_loop+0x35/0x90 [ 218.036370][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.036396][ T9576] RIP: 0033:0x7f281818d169 [ 218.036413][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.036429][ T9576] RSP: 002b:00007f281907a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.036449][ T9576] RAX: ffffffffffffffda RBX: 00007f28183a5fa0 RCX: 00007f281818d169 [ 218.036463][ T9576] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 00000000000000ad [ 218.036475][ T9576] RBP: 00007f281820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 218.036486][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.036497][ T9576] R13: 0000000000000000 R14: 00007f28183a5fa0 R15: 00007ffeb3cf1288 [ 218.036526][ T9576] [ 218.550831][ T9576] [ 218.553209][ T9576] ============================= [ 218.558068][ T9576] [ BUG: Invalid wait context ] [ 218.562940][ T9576] 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 Tainted: G W [ 218.571556][ T9576] ----------------------------- [ 218.576391][ T9576] syz.0.1071/9576 is trying to lock: [ 218.581660][ T9576] ffff88805cd18d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 218.590541][ T9576] other info that might help us debug this: [ 218.596422][ T9576] context-{5:5} [ 218.599879][ T9576] 2 locks held by syz.0.1071/9576: [ 218.604992][ T9576] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 218.614064][ T9576] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 218.623932][ T9576] stack backtrace: [ 218.627648][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.0.1071 Tainted: G W 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 218.627671][ T9576] Tainted: [W]=WARN [ 218.627676][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.627685][ T9576] Call Trace: [ 218.627693][ T9576] [ 218.627700][ T9576] dump_stack_lvl+0x241/0x360 [ 218.627720][ T9576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.627736][ T9576] ? __pfx__printk+0x10/0x10 [ 218.627761][ T9576] __lock_acquire+0x15a8/0x2100 [ 218.627792][ T9576] lock_acquire+0x1ed/0x550 [ 218.627813][ T9576] ? dev_set_allmulti+0x11c/0x270 [ 218.627840][ T9576] ? __pfx_lock_acquire+0x10/0x10 [ 218.627861][ T9576] ? dev_set_rx_mode+0x57/0x2e0 [ 218.627884][ T9576] ? __pfx___might_resched+0x10/0x10 [ 218.627905][ T9576] ? mark_lock+0x9a/0x360 [ 218.627922][ T9576] __mutex_lock+0x19c/0x1010 [ 218.627939][ T9576] ? dev_set_allmulti+0x11c/0x270 [ 218.627964][ T9576] ? __pfx___dev_notify_flags+0x10/0x10 [ 218.627988][ T9576] ? dev_set_allmulti+0x11c/0x270 [ 218.628010][ T9576] ? netif_set_allmulti+0x224/0x380 [ 218.628033][ T9576] ? __pfx___mutex_lock+0x10/0x10 [ 218.628049][ T9576] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.628068][ T9576] ? __pfx_bond_set_rx_mode+0x10/0x10 [ 218.628088][ T9576] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 218.628105][ T9576] ? netif_set_allmulti+0x264/0x380 [ 218.628131][ T9576] dev_set_allmulti+0x11c/0x270 [ 218.628157][ T9576] team_change_rx_flags+0x1a8/0x330 [ 218.628175][ T9576] ? team_change_rx_flags+0x29/0x330 [ 218.628193][ T9576] ? __pfx_team_change_rx_flags+0x10/0x10 [ 218.628211][ T9576] netif_set_allmulti+0x20e/0x380 [ 218.628236][ T9576] dev_set_allmulti+0x143/0x270 [ 218.628261][ T9576] del_nbp+0xce/0xb40 [ 218.628278][ T9576] br_del_if+0x145/0x320 [ 218.628291][ T9576] ? br_del_slave+0x12/0x30 [ 218.628310][ T9576] do_set_master+0x349/0x730 [ 218.628347][ T9576] do_setlink+0xfee/0x40f0 [ 218.628378][ T9576] ? __pfx_do_setlink+0x10/0x10 [ 218.628416][ T9576] ? __pfx___might_resched+0x10/0x10 [ 218.628434][ T9576] ? __pfx___mutex_trylock_common+0x10/0x10 [ 218.628451][ T9576] ? rcu_is_watching+0x15/0xb0 [ 218.628466][ T9576] ? trace_contention_end+0x3c/0x120 [ 218.628481][ T9576] ? __mutex_lock+0x397/0x1010 [ 218.628496][ T9576] ? __pfx_aa_get_newest_label+0x10/0x10 [ 218.628520][ T9576] ? rtnl_newlink+0xc4c/0x1d90 [ 218.628539][ T9576] ? __pfx___mutex_lock+0x10/0x10 [ 218.628557][ T9576] ? ns_capable+0x8a/0xf0 [ 218.628573][ T9576] ? rtnl_link_get_net_capable+0x168/0x340 [ 218.628595][ T9576] rtnl_newlink+0x15a6/0x1d90 [ 218.628619][ T9576] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.628637][ T9576] ? __pfx_validate_chain+0x10/0x10 [ 218.628660][ T9576] ? validate_chain+0x11e/0x5920 [ 218.628681][ T9576] ? __pfx_lock_acquire+0x10/0x10 [ 218.628710][ T9576] ? __pfx_lock_release+0x10/0x10 [ 218.628735][ T9576] ? __pfx_validate_chain+0x10/0x10 [ 218.628754][ T9576] ? mark_lock+0x9a/0x360 [ 218.628768][ T9576] ? __lock_acquire+0x1397/0x2100 [ 218.628798][ T9576] ? __pfx_lock_release+0x10/0x10 [ 218.628822][ T9576] ? __pfx_rtnl_newlink+0x10/0x10 [ 218.628841][ T9576] rtnetlink_rcv_msg+0x791/0xcf0 [ 218.628860][ T9576] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 218.628878][ T9576] ? __lock_acquire+0x1397/0x2100 [ 218.628898][ T9576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.628922][ T9576] netlink_rcv_skb+0x206/0x480 [ 218.628942][ T9576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.628961][ T9576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.628986][ T9576] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.629005][ T9576] netlink_unicast+0x7f6/0x990 [ 218.629024][ T9576] ? __pfx_netlink_unicast+0x10/0x10 [ 218.629039][ T9576] ? __virt_addr_valid+0x45f/0x530 [ 218.629052][ T9576] ? __phys_addr_symbol+0x2f/0x70 [ 218.629064][ T9576] ? __check_object_size+0x47a/0x730 [ 218.629083][ T9576] netlink_sendmsg+0x8de/0xcb0 [ 218.629107][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.629127][ T9576] ? aa_sock_msg_perm+0x91/0x160 [ 218.629148][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.629166][ T9576] __sock_sendmsg+0x221/0x270 [ 218.629185][ T9576] ____sys_sendmsg+0x53a/0x860 [ 218.629202][ T9576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.629215][ T9576] ? __fget_files+0x2a/0x410 [ 218.629235][ T9576] ? __fget_files+0x2a/0x410 [ 218.629256][ T9576] __sys_sendmsg+0x269/0x350 [ 218.629271][ T9576] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.629300][ T9576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.629320][ T9576] ? do_syscall_64+0x100/0x230 [ 218.629337][ T9576] ? do_syscall_64+0xb6/0x230 [ 218.629354][ T9576] do_syscall_64+0xf3/0x230 [ 218.629370][ T9576] ? clear_bhb_loop+0x35/0x90 [ 218.629390][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.629427][ T9576] RIP: 0033:0x7f281818d169 [ 218.629440][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.629452][ T9576] RSP: 002b:00007f281907a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.629467][ T9576] RAX: ffffffffffffffda RBX: 00007f28183a5fa0 RCX: 00007f281818d169 [ 218.629478][ T9576] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 00000000000000ad [ 218.629487][ T9576] RBP: 00007f281820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 218.629496][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.629506][ T9576] R13: 0000000000000000 R14: 00007f28183a5fa0 R15: 00007ffeb3cf1288 [ 218.629521][ T9576] [ 219.153450][ T9576] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 219.160751][ T9576] team0: left promiscuous mode [ 219.166529][ T9576] team_slave_0: left promiscuous mode [ 219.173014][ T9576] team_slave_1: left promiscuous mode [ 219.181006][ T9576] bond2: left promiscuous mode [ 219.185997][ T9576] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 219.193255][ T9576] bridge0: port 3(team0) entered disabled state [ 219.208287][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.361722][ T311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.330775][ T311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.474790][ T311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.526110][ T311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.621871][ T311] bridge_slave_1: left allmulticast mode [ 220.635651][ T311] bridge_slave_1: left promiscuous mode [ 220.641377][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.659504][ T311] bridge_slave_0: left allmulticast mode [ 220.665217][ T311] bridge_slave_0: left promiscuous mode [ 220.675855][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.852291][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.862932][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.881984][ T311] bond0 (unregistering): Released all slaves [ 221.114642][ T311] hsr_slave_0: left promiscuous mode [ 221.129898][ T311] hsr_slave_1: left promiscuous mode [ 221.142013][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.165734][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.174563][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.185404][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.204256][ T311] veth1_macvtap: left promiscuous mode [ 221.212865][ T311] veth0_macvtap: left promiscuous mode [ 221.226036][ T311] veth1_vlan: left promiscuous mode [ 221.231339][ T311] veth0_vlan: left promiscuous mode [ 221.544581][ T311] team0 (unregistering): Port device team_slave_1 removed [ 221.596609][ T311] team0 (unregistering): Port device team_slave_0 removed