last executing test programs: 4.007269444s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0) 3.927339614s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3.725116476s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0xc) 3.629161578s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/192, &(0x7f0000000140)=0xc0) 3.478620142s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) 3.364030101s ago: executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000d00)={0x0, 0x0, 0x4, 0x7}) 3.305445722s ago: executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) 3.181958113s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f051a000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.177772638s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4) 3.105089308s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/192, &(0x7f0000000140)=0xc0) 3.060786611s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x30, 0x107, 0x0, 0x0, {0x7, 0x7c}}, 0x14}}, 0x0) 3.011833616s ago: executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0xc, 0x8, 0xffffffffffffffff, @prog_fd}, 0x20) 2.975771476s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f0ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.915702171s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "296fbf320123cdfd", "33ac29b6f7ad0fb489c650e0074050f5", "06657c5e", "203b20fb672ecdf7"}, 0x28) 2.820742928s ago: executing program 2: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d0a000000000000000000000000000000010000050000000081701aa8"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1}, 0x20) 2.600284976s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) 2.468032014s ago: executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 2.229974744s ago: executing program 3: syz_emit_ethernet(0x50, &(0x7f0000002080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x0, 'Qh'}, {}]}}}}}}, 0x0) 2.062757176s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0xc) 1.929592155s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) 1.889854621s ago: executing program 0: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(0xffffffffffffffff, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x82, 0x0, &(0x7f0000001180)) 1.664688772s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f0000000140)="06", 0x1}], 0x2}}], 0x1, 0x6400c000) sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd) 1.570896477s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.440786102s ago: executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2404c7fc, &(0x7f00000028c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004801) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x5}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(r5, 0x5, &(0x7f0000000480)="167a2d5df6887de8ae5115d1182549206c51dd3ec50af2282a6eef7249c57f09562fe17f7a52536fb017f6205714856f2aaec2e9408cea61c4d41d6d4fd66418a069decf728c8a12d9c2e78715445f89ffe9c48a4a736081c09da4d3503719fbb4608d9a2b59f080ed183d19eb5c5d7643b670a507896481b16aa9d983ad1309255183a7733b923b2c77fc169cc9ed1f78632badd77be54fcfbcafed21616e7d478f701d202845b4b8c0f28a144ec1") setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000300)={{0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x4, 'sed\x00', 0x2, 0xf18, 0xe}, {@rand_addr=0x64010102, 0x4e24, 0x3, 0xffff, 0x9, 0x4}}, 0x44) socket$inet(0x2, 0x2, 0x9) 1.033786136s ago: executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @private1, 0xffffffff}, 0xf) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '\\'}, {0x20, '^-)%'}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '.^\xe1\xcd\xd1\xba._\xdaU\x1e\x06\x83\xf8\xff\x12\xc4\x0f\xed\xcb\x02y@?\xe30\xd0%u\xb0\xf5\xcd|\xb9<\xab\xe4\xeb\xfe\xdd\x1d\v\xed\xb0\xc2\x8f@\xc7M\x8d\xcf\x11\xee\xc0~\x14BUE\xb3\x06\x05r\xf1\xd9:D\v&\x85z\x80\xef\xd8\xfa]+\xf9\xc1\xcf\xaf\x12\\\\\xbcxj\xe1\xc7\xfeu\xd2\x83\xb9i\x15\xa1\xd7\xdc\xa6\xc2\x86\xa1E\x8e\xe1\xe7\xd8\xdc\n\xb7U\xdd{\xa3=O\xa0\x9e\xe6\xc0\xf0d\xaf\x1f\xde}?\xccU\xce\xe6|6\x14\x1d$dJ\xf2)e\xe7\r\xa3\x87\x10\xd8r\xfb\xa3\xf3&\n\xe3\xb2\xf0\x97+\xc2\x8d%\xd8\x01\xa7I9[w'}], 0xa, "11b2e4a2b4d8acda1690bef7b87d08685a30f9b205ed3e164ad8ae7566c83968f6f8b9f1a464fa1f08f0c3e827c5d07c541664ba573112a0ec6d882429d168feb714f25bef461e6c75e95f96bf11f5c2b119bad6f3fb86bf4f33e2e0322621d0"}, 0x123) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20005000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r6, 0x1}, 0x14}}, 0x0) 193.083305ms ago: executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x11, 0x0, &(0x7f0000006100)=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 145.058394ms ago: executing program 1: bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x17, 0x0, 0x0, @prog_id}, 0x20) 110.611227ms ago: executing program 1: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(r2) 62.13445ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 0s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00010000000000002c0012800b00010062726964676500001c000280060017"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. 2024/06/04 20:07:16 fuzzer started 2024/06/04 20:07:16 dialing manager at 10.128.0.169:30018 [ 65.350647][ T5086] cgroup: Unknown subsys name 'net' [ 65.503153][ T5086] cgroup: Unknown subsys name 'rlimit' 2024/06/04 20:07:18 starting 5 executor processes [ 66.667677][ T5087] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.829967][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.839797][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.851325][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.861186][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.862244][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.876124][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.878409][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.892674][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.892678][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.900948][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.910475][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.918240][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.923117][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.930013][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.938188][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.945841][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.952756][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.959798][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.965746][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.973889][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.982873][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.988899][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.995645][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.002642][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.017098][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.025004][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.032950][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.040933][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.051835][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.061488][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.619282][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 68.650274][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 68.686532][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 68.734063][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 68.922893][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.930228][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.939016][ T5108] bridge_slave_0: entered allmulticast mode [ 68.946067][ T5108] bridge_slave_0: entered promiscuous mode [ 68.954377][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 68.965562][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.972809][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.980110][ T5108] bridge_slave_1: entered allmulticast mode [ 68.987760][ T5108] bridge_slave_1: entered promiscuous mode [ 68.995737][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.003003][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.010167][ T5107] bridge_slave_0: entered allmulticast mode [ 69.017319][ T5107] bridge_slave_0: entered promiscuous mode [ 69.066577][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.074063][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.081615][ T5107] bridge_slave_1: entered allmulticast mode [ 69.089179][ T5107] bridge_slave_1: entered promiscuous mode [ 69.119100][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.170535][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.215634][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.222952][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.230283][ T5106] bridge_slave_0: entered allmulticast mode [ 69.237808][ T5106] bridge_slave_0: entered promiscuous mode [ 69.245849][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.253355][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.260654][ T5109] bridge_slave_0: entered allmulticast mode [ 69.267604][ T5109] bridge_slave_0: entered promiscuous mode [ 69.290192][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.300306][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.307621][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.314941][ T5106] bridge_slave_1: entered allmulticast mode [ 69.323103][ T5106] bridge_slave_1: entered promiscuous mode [ 69.329847][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.337187][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.345105][ T5109] bridge_slave_1: entered allmulticast mode [ 69.351942][ T5109] bridge_slave_1: entered promiscuous mode [ 69.381789][ T5108] team0: Port device team_slave_0 added [ 69.390717][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.445553][ T5108] team0: Port device team_slave_1 added [ 69.505546][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.513547][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.521560][ T5119] bridge_slave_0: entered allmulticast mode [ 69.528381][ T5119] bridge_slave_0: entered promiscuous mode [ 69.547425][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.555048][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.581802][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.596547][ T5107] team0: Port device team_slave_0 added [ 69.605692][ T5107] team0: Port device team_slave_1 added [ 69.614510][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.626868][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.646138][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.653384][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.660549][ T5119] bridge_slave_1: entered allmulticast mode [ 69.668704][ T5119] bridge_slave_1: entered promiscuous mode [ 69.676098][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.683519][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.709628][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.738073][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.759915][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.812426][ T5109] team0: Port device team_slave_0 added [ 69.849805][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.857310][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.885329][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.898758][ T5109] team0: Port device team_slave_1 added [ 69.919080][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.931998][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.950709][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.958562][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.984742][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.011436][ T5106] team0: Port device team_slave_0 added [ 70.042701][ T5108] hsr_slave_0: entered promiscuous mode [ 70.049159][ T5108] hsr_slave_1: entered promiscuous mode [ 70.086839][ T5106] team0: Port device team_slave_1 added [ 70.093030][ T53] Bluetooth: hci4: command tx timeout [ 70.097343][ T5118] Bluetooth: hci0: command tx timeout [ 70.098638][ T5113] Bluetooth: hci3: command tx timeout [ 70.105075][ T5118] Bluetooth: hci2: command tx timeout [ 70.110536][ T5113] Bluetooth: hci1: command tx timeout [ 70.135430][ T5119] team0: Port device team_slave_0 added [ 70.150305][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.157987][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.187577][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.213542][ T5119] team0: Port device team_slave_1 added [ 70.220074][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.227664][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.253819][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.287569][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.294706][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.321985][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.353771][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.360977][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.387533][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.433721][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.440713][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.467884][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.494892][ T5107] hsr_slave_0: entered promiscuous mode [ 70.502236][ T5107] hsr_slave_1: entered promiscuous mode [ 70.508787][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.516757][ T5107] Cannot create hsr debugfs directory [ 70.540671][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.547984][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.574454][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.606566][ T5106] hsr_slave_0: entered promiscuous mode [ 70.613475][ T5106] hsr_slave_1: entered promiscuous mode [ 70.619621][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.627319][ T5106] Cannot create hsr debugfs directory [ 70.736594][ T5119] hsr_slave_0: entered promiscuous mode [ 70.743133][ T5119] hsr_slave_1: entered promiscuous mode [ 70.749151][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.756825][ T5119] Cannot create hsr debugfs directory [ 70.770650][ T5109] hsr_slave_0: entered promiscuous mode [ 70.777884][ T5109] hsr_slave_1: entered promiscuous mode [ 70.784230][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.792162][ T5109] Cannot create hsr debugfs directory [ 71.185742][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.203840][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.223848][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.245773][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.298547][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.310489][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.338396][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.348925][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.408963][ T5107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.419512][ T5107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.431466][ T5107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.459264][ T5107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.532967][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.552223][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.597964][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.610033][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.685516][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.696072][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.708862][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.728821][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.868358][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.881568][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.923903][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.955851][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.983617][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.019207][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.026699][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.038480][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045802][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.077340][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.084630][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.097801][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.105114][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.129357][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.170616][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.180004][ T5113] Bluetooth: hci4: command tx timeout [ 72.180067][ T5113] Bluetooth: hci2: command tx timeout [ 72.180098][ T5113] Bluetooth: hci3: command tx timeout [ 72.180129][ T5113] Bluetooth: hci0: command tx timeout [ 72.181040][ T5113] Bluetooth: hci1: command tx timeout [ 72.203406][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.222596][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.229428][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.252432][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.259766][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.275417][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.282748][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.326556][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.333791][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.359839][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.375871][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.393248][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.400351][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.480038][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.517857][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.616851][ T5106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.636105][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.654324][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.661567][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.709818][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.717047][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.890652][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.016074][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.048016][ T5108] veth0_vlan: entered promiscuous mode [ 73.079584][ T5108] veth1_vlan: entered promiscuous mode [ 73.179245][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.265049][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.364942][ T5108] veth0_macvtap: entered promiscuous mode [ 73.409947][ T5106] veth0_vlan: entered promiscuous mode [ 73.452961][ T5108] veth1_macvtap: entered promiscuous mode [ 73.463933][ T5106] veth1_vlan: entered promiscuous mode [ 73.481333][ T5119] veth0_vlan: entered promiscuous mode [ 73.489526][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.544468][ T5106] veth0_macvtap: entered promiscuous mode [ 73.557901][ T5106] veth1_macvtap: entered promiscuous mode [ 73.585233][ T5119] veth1_vlan: entered promiscuous mode [ 73.613364][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.657122][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.671258][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.682359][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.702053][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.713621][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.724586][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.736080][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.749391][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.759562][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.768738][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778663][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.806044][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819481][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.829256][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.838468][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.854854][ T5107] veth0_vlan: entered promiscuous mode [ 73.890701][ T5109] veth0_vlan: entered promiscuous mode [ 73.912177][ T5107] veth1_vlan: entered promiscuous mode [ 73.956821][ T5119] veth0_macvtap: entered promiscuous mode [ 73.987817][ T5119] veth1_macvtap: entered promiscuous mode [ 74.012093][ T5109] veth1_vlan: entered promiscuous mode [ 74.112103][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.123198][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.133661][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.146123][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.159062][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.170586][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.184260][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.231354][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.239250][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.240372][ T5109] veth0_macvtap: entered promiscuous mode [ 74.262667][ T5113] Bluetooth: hci1: command tx timeout [ 74.262692][ T53] Bluetooth: hci0: command tx timeout [ 74.268242][ T5113] Bluetooth: hci3: command tx timeout [ 74.273838][ T5118] Bluetooth: hci2: command tx timeout [ 74.279456][ T5113] Bluetooth: hci4: command tx timeout [ 74.300583][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.308104][ T5109] veth1_macvtap: entered promiscuous mode [ 74.315664][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.322550][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.338637][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.348890][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.359628][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.373182][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.406073][ T5107] veth0_macvtap: entered promiscuous mode [ 74.444122][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.455542][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.464598][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474157][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.499534][ T5107] veth1_macvtap: entered promiscuous mode [ 74.509893][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.526937][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.537122][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.550687][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.573646][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.585905][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.593943][ T5190] net_ratelimit: 2 callbacks suppressed [ 74.593963][ T5190] dccp_invalid_packet: P.Data Offset(0) too small [ 74.596153][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.618983][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.638669][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.702042][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.716381][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.727488][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.738882][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.749445][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.760337][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.773841][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.838038][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848027][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863151][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.872141][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.890526][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.918444][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.935792][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.950255][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.964903][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.978550][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.005054][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.026144][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.039259][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.127495][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.143635][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.153678][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.165196][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.185050][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.196461][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.230893][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.249418][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.268515][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.305513][ T2451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.335305][ T2451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.379902][ T5107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.413359][ T5107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.429118][ T5107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.448135][ T5107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.556465][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.606144][ T5111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.629273][ T5111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.831921][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.839808][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.921099][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.929151][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.050171][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.075264][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.217541][ T5158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.261729][ T5158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.331792][ T5113] Bluetooth: hci4: command tx timeout [ 76.332529][ T5118] Bluetooth: hci2: command tx timeout [ 76.337231][ T5113] Bluetooth: hci0: command tx timeout [ 76.343702][ T53] Bluetooth: hci3: command tx timeout [ 76.350395][ T5113] Bluetooth: hci1: command tx timeout [ 76.476174][ T5246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.960568][ T5264] tap0: tun_chr_ioctl cmd 2147767521 [ 77.595378][ T5291] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 78.173706][ T5316] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.915565][ T5352] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.071754][ T5359] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 79.313695][ T5367] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 79.866637][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.892795][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.944054][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.981906][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.017470][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.051770][ T5406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.085941][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.136861][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.166778][ T5406] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 80.191852][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.222950][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.275275][ T5406] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 80.547364][ T5424] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.670458][ T5424] syz_tun: entered promiscuous mode [ 80.711354][ T5424] macvlan2: entered promiscuous mode [ 81.035371][ T5440] __nla_validate_parse: 14 callbacks suppressed [ 81.035393][ T5440] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.291580][ T5448] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.651643][ T5465] netlink: zone id is out of range [ 81.670721][ T5465] netlink: zone id is out of range [ 81.732629][ T5465] netlink: zone id is out of range [ 81.738405][ T5465] netlink: zone id is out of range [ 81.808610][ T5465] netlink: set zone limit has 4 unknown bytes [ 81.998718][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.039916][ T5481] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.426647][ T784] cfg80211: failed to load regulatory.db [ 82.458438][ T5500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.589393][ T5500] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 83.989364][ T5559] netlink: zone id is out of range [ 84.032983][ T5559] netlink: zone id is out of range [ 84.063141][ T5559] netlink: zone id is out of range [ 84.419660][ T5571] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.471754][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.486138][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.496852][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.506102][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.522990][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.530566][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.620235][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.623115][ T5113] Bluetooth: hci3: command tx timeout [ 87.953632][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.047905][ T5604] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 88.074471][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.152582][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.241800][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.615180][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.466364][ T12] bridge_slave_1: left allmulticast mode [ 89.487543][ T12] bridge_slave_1: left promiscuous mode [ 89.523145][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.598959][ T12] bridge_slave_0: left allmulticast mode [ 89.627594][ T12] bridge_slave_0: left promiscuous mode [ 89.647969][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.691229][ T5113] Bluetooth: hci3: command tx timeout [ 90.452131][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.876836][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.933032][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.997937][ T12] bond0 (unregistering): Released all slaves [ 91.049749][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 91.773089][ T5113] Bluetooth: hci3: command tx timeout [ 92.032608][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.091587][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.098765][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.144495][ T5593] bridge_slave_0: entered allmulticast mode [ 92.166379][ T5593] bridge_slave_0: entered promiscuous mode [ 92.380567][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.405092][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.441868][ T5593] bridge_slave_1: entered allmulticast mode [ 92.492183][ T5593] bridge_slave_1: entered promiscuous mode [ 92.624387][ T12] hsr_slave_0: left promiscuous mode [ 92.710235][ T12] hsr_slave_1: left promiscuous mode [ 92.771209][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.810891][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.884109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.909280][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.985751][ T12] veth1_macvtap: left promiscuous mode [ 92.997261][ T12] veth0_macvtap: left promiscuous mode [ 93.008034][ T12] veth1_vlan: left promiscuous mode [ 93.017902][ T12] veth0_vlan: left promiscuous mode [ 93.423882][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.852535][ T5113] Bluetooth: hci3: command tx timeout [ 94.053765][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.138234][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.025987][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.093512][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.315985][ T5593] team0: Port device team_slave_0 added [ 95.351645][ T5593] team0: Port device team_slave_1 added [ 95.580630][ T5768] net_ratelimit: 2 callbacks suppressed [ 95.580652][ T5768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.657755][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.713147][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.810823][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.864549][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.894490][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.978213][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.038614][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.064021][ T5784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.576273][ T5593] hsr_slave_0: entered promiscuous mode [ 96.624431][ T5593] hsr_slave_1: entered promiscuous mode [ 96.688630][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.712693][ T5593] Cannot create hsr debugfs directory [ 98.243066][ T5875] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 98.265195][ T5875] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 98.289009][ T5875] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.415224][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.422974][ T5885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.448141][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.453148][ T5886] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 98.500138][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.582310][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.651073][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.935127][ T5904] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 99.034754][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.134797][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.193087][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.200285][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.233395][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.240649][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.403215][ T5593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.823875][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.872479][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.905957][ T5940] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 100.092928][ T5593] veth0_vlan: entered promiscuous mode [ 100.155232][ T5593] veth1_vlan: entered promiscuous mode [ 100.285442][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.365585][ T5593] veth0_macvtap: entered promiscuous mode [ 100.408923][ T5593] veth1_macvtap: entered promiscuous mode [ 100.486991][ T5969] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 100.530095][ T5969] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 100.561270][ T5969] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.627323][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.680645][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.708100][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.724104][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.738465][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.753370][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.807850][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.889529][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.953481][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.988526][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.012199][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.024720][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.035921][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.054260][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.067820][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.093236][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.269701][ T5593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.317543][ T5593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.346312][ T5593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.356972][ T5593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.385000][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.848754][ T6033] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 101.924211][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.949378][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.126370][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.170467][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.919575][ T6125] syz_tun: entered promiscuous mode [ 104.038035][ T6125] syz_tun: left promiscuous mode [ 104.145884][ T6139] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 104.773462][ T29] audit: type=1804 audit(1717531676.221:2): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2908119054/syzkaller.hRa7AL/87/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 104.923866][ T6175] No such timeout policy "syz0" [ 105.562400][ T6213] openvswitch: netlink: Unknown nsh attribute 0 [ 105.627365][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.666990][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.855559][ T6224] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 105.872283][ T6224] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 105.887732][ T6222] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 105.968619][ T6222] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.988531][ T6222] gretap0: entered promiscuous mode [ 109.606943][ T6235] Bluetooth: MGMT ver 1.22 [ 109.616455][ T6234] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 110.390455][ T6271] bridge0: port 3(team0) entered blocking state [ 110.431043][ T6271] bridge0: port 3(team0) entered disabled state [ 110.468298][ T6271] team0: entered allmulticast mode [ 110.508052][ T6271] team_slave_0: entered allmulticast mode [ 110.538962][ T6271] team_slave_1: entered allmulticast mode [ 110.614754][ T6271] team0: entered promiscuous mode [ 110.628277][ T6271] team_slave_0: entered promiscuous mode [ 110.643540][ T6271] team_slave_1: entered promiscuous mode [ 110.689933][ T6271] bridge0: port 3(team0) entered blocking state [ 110.697515][ T6271] bridge0: port 3(team0) entered forwarding state [ 110.766581][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.808905][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.733217][ T6330] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 111.776101][ T6330] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 111.796897][ T6326] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 111.933463][ T6326] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.022309][ T6326] gretap0: entered promiscuous mode [ 112.097020][ T6339] pimreg: entered allmulticast mode [ 112.125447][ T6345] pimreg: left allmulticast mode [ 113.494305][ T6386] sch_fq: defrate 0 ignored. [ 113.520605][ T6388] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 113.552119][ T6388] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 113.604022][ T6382] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 113.682327][ T6382] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.992295][ T6426] pimreg: entered allmulticast mode [ 115.054648][ T6426] pimreg: left allmulticast mode [ 116.139674][ T6458] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 116.308098][ T6458] bond1: entered promiscuous mode [ 116.338786][ T6463] bond0: (slave bond_slave_0): Releasing backup interface [ 116.434900][ T6463] bond1: (slave bond_slave_0): making interface the new active one [ 116.486959][ T6463] bond_slave_0: entered promiscuous mode [ 116.507486][ T6463] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.546791][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.607769][ T6458] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 116.640419][ T6458] bond_slave_0: left promiscuous mode [ 116.661624][ T6458] bond1 (unregistering): Released all slaves [ 117.247410][ T6499] sch_fq: defrate 0 ignored. [ 118.477532][ T6528] sch_fq: defrate 0 ignored. [ 118.798118][ T6545] tipc: Started in network mode [ 118.803800][ T6545] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.819132][ T6545] tipc: Enabled bearer <udp:syz2>, priority 10 [ 118.833679][ T6545] tipc: Disabling bearer <udp:syz2> [ 119.329793][ T6572] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 119.471577][ T6577] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 119.489208][ T6577] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 119.717902][ T6588] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 119.986631][ T6597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.596022][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.068584][ T6633] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 121.094209][ T6633] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 121.958729][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.419481][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.550282][ T4543] udevd[4543]: worker [5504] terminated by signal 33 (Unknown signal 33) [ 122.577851][ T4543] udevd[4543]: worker [5504] failed while handling '/devices/virtual/block/loop1' [ 123.035395][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.201776][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.455600][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.693614][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.705104][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.748671][ T6753] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.759120][ T6753] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.768726][ T6753] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.777754][ T6753] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.792374][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.795460][ T6753] vxlan0: entered promiscuous mode [ 123.826085][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.835304][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.947291][ T6760] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 124.054726][ T6765] syzkaller0: entered allmulticast mode [ 124.351356][ T6777] IPVS: length: 192 != 8 [ 124.821553][ T6792] syzkaller0: entered allmulticast mode [ 124.840433][ T6803] IPVS: length: 192 != 8 [ 125.045449][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.111236][ T6805] bond0: entered promiscuous mode [ 125.254471][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.438067][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.572615][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.956879][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.981111][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.992906][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.031179][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.051984][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.063498][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.735020][ T6874] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 127.166028][ T6877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.118169][ T6891] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 128.127254][ T46] ------------[ cut here ]------------ [ 128.133476][ T46] refcount_t: addition on 0; use-after-free. [ 128.145950][ T46] WARNING: CPU: 1 PID: 46 at lib/refcount.c:25 refcount_warn_saturate+0x13a/0x1d0 [ 128.155364][ T46] Modules linked in: [ 128.160274][ T46] CPU: 1 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0 [ 128.171335][ T5113] Bluetooth: hci0: command tx timeout [ 128.178028][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 128.188491][ T46] Workqueue: netns cleanup_net [ 128.193390][ T46] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 128.199594][ T46] Code: 80 9f 1f 8c e8 a7 f1 a8 fc 90 0f 0b 90 90 eb b9 e8 0b c3 e6 fc c6 05 a8 6e e8 0a 01 90 48 c7 c7 e0 9f 1f 8c e8 87 f1 a8 fc 90 <0f> 0b 90 90 eb 99 e8 eb c2 e6 fc c6 05 89 6e e8 0a 01 90 48 c7 c7 [ 128.219347][ T46] RSP: 0018:ffffc90000b673a0 EFLAGS: 00010246 [ 128.225681][ T46] RAX: aeacbc3fb5d60300 RBX: ffff88801829263c RCX: ffff88801b2a9e00 [ 128.233690][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.243677][ T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.251774][ T46] RBP: 0000000000000002 R08: ffffffff815847a2 R09: 1ffff110172a519a 2024/06/04 20:08:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 128.261714][ T46] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffffffffffffffff [ 128.269757][ T46] R13: ffff88807e1ed000 R14: ffff88801829263c R15: dffffc0000000000 [ 128.278482][ T46] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 128.287568][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.294335][ T46] CR2: 00007f7820726ff8 CR3: 000000001e5ca000 CR4: 00000000003506f0 [ 128.302429][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.310440][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.318594][ T46] Call Trace: [ 128.322276][ T46] <TASK> [ 128.325232][ T46] ? __warn+0x163/0x4e0 [ 128.329418][ T46] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.335300][ T46] ? report_bug+0x2b3/0x500 [ 128.339937][ T46] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.345673][ T46] ? handle_bug+0x3e/0x70 [ 128.350048][ T46] ? exc_invalid_op+0x1a/0x50 [ 128.354918][ T46] ? asm_exc_invalid_op+0x1a/0x20 [ 128.359993][ T46] ? __warn_printk+0x292/0x360 [ 128.365629][ T46] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.372318][ T46] nsim_fib_event_nb+0xee9/0x10b0 [ 128.377414][ T46] call_fib_notifier+0x42/0x70 [ 128.382278][ T46] fib_notify+0x445/0x780 [ 128.386666][ T46] ? __pfx_fib_notify+0x10/0x10 [ 128.391627][ T46] register_fib_notifier+0x182/0x370 [ 128.396999][ T46] ? register_fib_notifier+0x63/0x370 [ 128.402505][ T46] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 128.408804][ T46] nsim_fib_create+0x902/0xa70 [ 128.413782][ T46] ? __pfx_nsim_fib_create+0x10/0x10 [ 128.419126][ T46] nsim_dev_reload_up+0x3d1/0x8e0 [ 128.424248][ T46] ? lockdep_hardirqs_on+0x99/0x150 [ 128.429506][ T46] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 128.435174][ T46] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 128.441388][ T46] devlink_reload+0x478/0x870 [ 128.446125][ T46] ? __pfx_devlink_reload+0x10/0x10 [ 128.451468][ T46] devlink_pernet_pre_exit+0x1f3/0x440 [ 128.457083][ T46] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 128.463625][ T46] ? class_remove_file_ns+0x121/0x160 [ 128.469067][ T46] cleanup_net+0x615/0xcc0 [ 128.474447][ T46] ? __pfx_cleanup_net+0x10/0x10 [ 128.479468][ T46] ? process_scheduled_works+0x945/0x1830 [ 128.485646][ T46] process_scheduled_works+0xa2c/0x1830 [ 128.491820][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.497959][ T46] ? assign_work+0x364/0x3d0 [ 128.502917][ T46] worker_thread+0x86d/0xd70 [ 128.507569][ T46] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 128.513585][ T46] ? __kthread_parkme+0x169/0x1d0 [ 128.518658][ T46] ? __pfx_worker_thread+0x10/0x10 [ 128.523889][ T46] kthread+0x2f0/0x390 [ 128.527999][ T46] ? __pfx_worker_thread+0x10/0x10 [ 128.533190][ T46] ? __pfx_kthread+0x10/0x10 [ 128.537825][ T46] ret_from_fork+0x4b/0x80 [ 128.542341][ T46] ? __pfx_kthread+0x10/0x10 [ 128.546968][ T46] ret_from_fork_asm+0x1a/0x30 [ 128.551872][ T46] </TASK> [ 128.554923][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.562225][ T46] CPU: 1 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0 [ 128.572315][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 128.582396][ T46] Workqueue: netns cleanup_net [ 128.587180][ T46] Call Trace: [ 128.590455][ T46] <TASK> [ 128.593383][ T46] dump_stack_lvl+0x241/0x360 [ 128.598063][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.603255][ T46] ? __pfx__printk+0x10/0x10 [ 128.607846][ T46] ? vscnprintf+0x5d/0x90 [ 128.612173][ T46] panic+0x349/0x860 [ 128.616065][ T46] ? __warn+0x172/0x4e0 [ 128.620217][ T46] ? __pfx_panic+0x10/0x10 [ 128.624637][ T46] ? ret_from_fork_asm+0x1a/0x30 [ 128.629583][ T46] __warn+0x346/0x4e0 [ 128.633567][ T46] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.639113][ T46] report_bug+0x2b3/0x500 [ 128.643440][ T46] ? refcount_warn_saturate+0x13a/0x1d0 [ 128.648994][ T46] handle_bug+0x3e/0x70 [ 128.653159][ T46] exc_invalid_op+0x1a/0x50 [ 128.657665][ T46] asm_exc_invalid_op+0x1a/0x20 [ 128.662518][ T46] RIP: 0010:refcount_warn_saturate+0x13a/0x1d0 [ 128.668677][ T46] Code: 80 9f 1f 8c e8 a7 f1 a8 fc 90 0f 0b 90 90 eb b9 e8 0b c3 e6 fc c6 05 a8 6e e8 0a 01 90 48 c7 c7 e0 9f 1f 8c e8 87 f1 a8 fc 90 <0f> 0b 90 90 eb 99 e8 eb c2 e6 fc c6 05 89 6e e8 0a 01 90 48 c7 c7 [ 128.688287][ T46] RSP: 0018:ffffc90000b673a0 EFLAGS: 00010246 [ 128.694359][ T46] RAX: aeacbc3fb5d60300 RBX: ffff88801829263c RCX: ffff88801b2a9e00 [ 128.702335][ T46] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.710298][ T46] RBP: 0000000000000002 R08: ffffffff815847a2 R09: 1ffff110172a519a [ 128.718262][ T46] R10: dffffc0000000000 R11: ffffed10172a519b R12: ffffffffffffffff [ 128.726236][ T46] R13: ffff88807e1ed000 R14: ffff88801829263c R15: dffffc0000000000 [ 128.734214][ T46] ? __warn_printk+0x292/0x360 [ 128.738998][ T46] nsim_fib_event_nb+0xee9/0x10b0 [ 128.744030][ T46] call_fib_notifier+0x42/0x70 [ 128.748797][ T46] fib_notify+0x445/0x780 [ 128.753132][ T46] ? __pfx_fib_notify+0x10/0x10 [ 128.758081][ T46] register_fib_notifier+0x182/0x370 [ 128.763361][ T46] ? register_fib_notifier+0x63/0x370 [ 128.768735][ T46] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 128.774988][ T46] nsim_fib_create+0x902/0xa70 [ 128.779773][ T46] ? __pfx_nsim_fib_create+0x10/0x10 [ 128.785106][ T46] nsim_dev_reload_up+0x3d1/0x8e0 [ 128.790149][ T46] ? lockdep_hardirqs_on+0x99/0x150 [ 128.795468][ T46] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 128.801030][ T46] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 128.807100][ T46] devlink_reload+0x478/0x870 [ 128.811779][ T46] ? __pfx_devlink_reload+0x10/0x10 [ 128.816986][ T46] devlink_pernet_pre_exit+0x1f3/0x440 [ 128.822472][ T46] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 128.828467][ T46] ? class_remove_file_ns+0x121/0x160 [ 128.833841][ T46] cleanup_net+0x615/0xcc0 [ 128.838260][ T46] ? __pfx_cleanup_net+0x10/0x10 [ 128.843204][ T46] ? process_scheduled_works+0x945/0x1830 [ 128.848917][ T46] process_scheduled_works+0xa2c/0x1830 [ 128.854484][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.861248][ T46] ? assign_work+0x364/0x3d0 [ 128.865836][ T46] worker_thread+0x86d/0xd70 [ 128.870427][ T46] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 128.876323][ T46] ? __kthread_parkme+0x169/0x1d0 [ 128.881353][ T46] ? __pfx_worker_thread+0x10/0x10 [ 128.886463][ T46] kthread+0x2f0/0x390 [ 128.890538][ T46] ? __pfx_worker_thread+0x10/0x10 [ 128.895644][ T46] ? __pfx_kthread+0x10/0x10 [ 128.900228][ T46] ret_from_fork+0x4b/0x80 [ 128.904643][ T46] ? __pfx_kthread+0x10/0x10 [ 128.909234][ T46] ret_from_fork_asm+0x1a/0x30 [ 128.914020][ T46] </TASK> [ 128.917305][ T46] Kernel Offset: disabled [ 128.921702][ T46] Rebooting in 86400 seconds..