last executing test programs: 1m11.592241236s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 1m0.337950635s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 50.059962075s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 41.81587799s ago: executing program 4 (id=656): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0xed, 0xb, 0x59, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x700, 0x7f00, 0x4, 0x7f}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@local, @multicast1, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@local, 0x0}, &(0x7f0000000580)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x4081) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x13000200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25060000002c0001800800030000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES8=r5, @ANYBLOB="0800030000000000180001801400020076657468300000000000000000000000300001801400020073797a5f74756e000000000000000000080003000000000008000100", @ANYRES32=r4, @ANYBLOB="0800030001000000780001801400020076657468305f766972745f77696669001400020070696d36726567300000000000000000080003000200000008000100", @ANYRES8=r6, @ANYBLOB="08d3af539f0de5bd000100f75e1d41c28665992361d5a24bb9d4854c1566bd9ef3bc8aad786a8d970b9407f4a2af43bb2ce84676906e90ffb4e5e925f3c3d850034e4201e55346e6f7b735ce466e536714854dfeadb3c6af1b91630c3ba4a7ad4092c87e1ddfaebf2cf4938941b8eb4fc457269fcfee34aa2ff8d305d1e9c3e2aa2f7f0d708de81aa9bd9433f853e81383dfcec3d8d145f40dbec9aa011734ddd213dff33baa6d217e4a88e38877b7777d573525b42e86cdb3da9521b72b9c72797c651c15b3a12d0ffd2aecf9a68a94950910d03e43392dd87972050b5aeda992e7f83283afa99cfffeff46fe7b0f4e85f8059b63f460825d", @ANYRES32=r6, @ANYBLOB="080003000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f766972745f776966690008000100", @ANYRES32=r10, @ANYBLOB="08000300040000004400018014000200766574683000000000000000000000001400020076657468315f746f5f626f6e64000000080003000300000008000300030000000800030000000000"], 0x144}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept$alg(r11, 0x0, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r12, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}, {0x0}], 0x2, 0x0, 0x0, 0x400048c0}, 0x0) 41.523694517s ago: executing program 4 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0200000006"], 0x10) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_LINKMODE={0x5, 0x11, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008100}, 0x40004) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0200000006"], 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_LINKMODE={0x5, 0x11, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008100}, 0x40004) (async) 41.336062166s ago: executing program 4 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket(0x11, 0x80a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000080)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x32, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000000100000000000c000000000000", @ANYRES32=r5, @ANYBLOB="0000000000140000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 41.083470937s ago: executing program 4 (id=661): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 36.52474062s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 27.292085724s ago: executing program 4 (id=661): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.39744669s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 13.598801331s ago: executing program 4 (id=661): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.529657523s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000100)="38d0c63e7681a69b9da7cf9a96cedfdb7eca34893313171225d5126c79b08019ebb0115017295cf1c66dff168a2e5d9fc7ef6d040518938973e50ef7c8742e699e44e04b32b4", 0x46, 0x1cc304f909611477, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x34, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) 2.267086175s ago: executing program 2 (id=929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, 0x0, 0x0, 0x12040, 0x0) sendmmsg$alg(r1, &(0x7f00000084c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)="97bda4efbb47b0f4c2c28abbdb99d9188adcf046b932ce20f328e5bab6a60609a930f92e1e688643049ebf71f7340fbe7e4aeaa8ac949d5b1a02c441200125151ef1a4a39f70b69aeaa1fc1c665797d691c54b5132528e9674b3d925d3c9d5da2b428664279e816cd60fbc00f8da85197715d99021abb20f487a1649197786ae3dad14f7aba9659798881cc0b648abf6e6a1923364c1b3ec0a661acdc6c1836b1ddce4acde5eb2561daef3b048e4c153ee71cff7b056de786cf1fbf9bd44216724802a8bd30dbec90a64f5ea808852868348a732063ddec944db0188d5811ea649056994b39ad5cd2a7464dea9451bacd5f8ac1a2097b28cbf18ded534b1358802994ddfb486036937fb116a115b7f9be04efce2053727004cfa6b7e822fbac02ef51432524e3cd723c7043e28ee03da91f2c193b48ab18a1a070e67715db21bf1298b292f667e01d6f101729547c8723bf09834500ad6cea3e198b6e0283220f736f272cde6268db8cbbf7bec73f1f80e11f12ccdd4ec065a11dafee57bcea93ab63d15c80f50aaa16d92cbe86e2d38167ffa1e4cd7370c1503a3d5a7ec6fe71f457c8ff3396e179913ce754215e5ce138d9c3164fbd1506859b5ce1df90f442cbcd4c95b37e1eb94fbe5be5d416566e73dbef3c88490a5425b9967961029cda92b84e55ee420937f12e4f9d5bc28d46913ae1df7e9c34dd563a0854852b256d34630b3ab444825542c9717ba80f6695cf9d961bb23ffb5cc0c16524681735f6c2f4edb707c212de4bf38f596ad73b91861ac252eef3327d8db3b55c962a23d6206ff1aad9f43cecaa5aa1e80ac3f7b1f69009bc4d23313d88df6d7b802945f30dfe0547c01fe99902e9c744fb940bcfce77daca59b0619b69e867522f37c9b28084010945318f0a51a82d232f4394cf4245fe9a9666a6bad66afb3cc0d834c29bb239a8f027121ae12200a2d3fc300ac6a97aee281d0e3cb7339a13e17f0111199f1c4cfe568a8602559aea9a3128659054df6740d462a66aa45fe35e4f0a313fc346a9c2e1b292d5e1b4faf4207106f3b5ee8a612d02bf99adfaaba582846b04dbf8c7caa3fe0fcc814e8690aa6a0c8a33ee00a89bcb5174f26545bdbe81ae98785ac6f79ec0919c1f796db9808f7a8136154184e456609e5480d76b553bcbf82f55fc004bc5e9c3cb9e59be40e78360f2120b15f2c02e6a97bded0b53442156c49b522c73c6b0feaf70733379d75ae2dc2e68ca3014b94fcac1fa30a7a6eb21019d0fbe2732ae1bbdcaf6325ce0d8eea9bf49a45de32f8b482f42fe5102b757f4e8f502867415dafd844fb9580bf3cc2ef73a466d1150247c80032605fbb379fdd6494080f88af8aef26143010fe2302c5be99bcecc3b93b233e29774d4d3d971b1606c5b8e898f9762d6d631c06220e1b8141d33b312cd134c33c1f292655ebcb522115296a3fc80f22bfa0273bd34d7f24884dfaa83ab19731e1794fd25d9d6d9917ec7551b0fc0e8496c041cf57a87a4e31ff1f2e65b3298da70466b1222cf8c03939e2c579eddf1dca9e89bdcf6e9fed49835191c13cc202374d3be2bf66c3cd64fa85802f7dc0355ec61f913ceece04d8227d0877253c3e89a79709a5fc083362aed1e60bcdf243cc16c492d05f3648bf2f094b051d10a612066231148d054993dd13a8d8a2d202a16f613094761b1261843b3fce5386914790f5b19e1c166c75a3ff62439fbb17ba721c5ca3b44b82009b22c62736ff111a91cc380663125a12b1ad92dd3c0d553362c441719c81c47c7131664e47ad433bf0b045c245a9aa84b3f5e9434ddb6102ff1fd591ec99add4f1f9f4de78694e3aafb238d5c5114f0af0f65bcd945f40d5f400a9d7ab94e2a75e17dcfbf5fb4368866355cc8c12177c4d294c8d8102d9cfae15d5ed81149fd20964dc6059979a76f2e4390a8ffa1c9789644d5ad5252c0dddee0486fd46cd5721b09cd056d21b1147e00818c19b3e7dc52c97ca6ebc17d6919e3f1d07512181a815dacb53da68f81fd28314c5bef74c7b8da688bf02ab8a207e984036aeb7a9c0e0fa515380a2b7d6b2769ddd2b3eda9eef4b29c65bbac8e505a3de6103a31076ee945ff0bf5e2134e1cf6cbc84476473c5038104e56337e99f5a23a257ada0f1e3a5465f313d3a448d39c1bf2bd1ece3b28f15278ca8d9bcafec07b2b94d1055c8f7300b4e0dc162bb56746e512eb6e37aa87ecd9f7e7f4aaed53b9b84ab0bf6b4af97f0d289b823413d40f2c19aa76047afd5722368a7848c8664e70d54eab77e561ec1453ff8f8d56ac0b8d336b4fc74a4a46f7b573b9d2eb8868ab3836a92319ffff20706a65cb04ba1f3975ebacd726098deda68dc521737b19210cc3e9df4914af3fb631c3c43c16b16c78a5a646e8ec7ab70a50681dda1f2b4b3087b9d0d4fe34bc23af9c5033dff030412b22e4010771188df69d667ee656be1046157a666716604e56260efaaa0e6946652e15cfa6151338b75e5c6b22fa30544766ebfcb2091aaf7699a1ab3e829ebeb8ab49abc471962d2ac9c7421b0ddd28d56282381e39cb8d438ce6d4e091e1e2ef110b70c97ec230880debe5e0bc0f051cad9a9a1de7edfb90f4b83b4394ef5965cb88991eca54606eb7c64b3d9c1b73d0bd9c695f783b65e5957ca4fcc0d929107dfa1c1a3f922473f17ce66575a66a828aef0521d0ebeb607edd6047d98dabd7360eefe335f33ddfba60587f636d53fbdd1a96e56942243ee3fa8e3c4c4a98c1967ea81134dcdcb123211304380b59a94bf40cee75f46e798ebbbe731edd04a91dfeb67250878cf18e7c9893b46d15b3362ca11674a2d9a2649df7fb001aa5fca8dee71d52d7edb76009f0db1f108160e67bb284d3cb92bab4769db77ee9a51c00414478b233d3418e7335bea96e094ab6baeec0fc8bc19a85e1211", 0x820}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x1) recvmmsg$unix(r1, &(0x7f000000dec0)=[{{0x0, 0x0, &(0x7f000000aa40)=[{&(0x7f00000086c0)=""/24, 0x18}, {&(0x7f0000008980)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10022, 0x0) (fail_nth: 1) 2.128059799s ago: executing program 1 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2tp6, &(0x7f0000000280)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0)=0x8001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0xe4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x14}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) 1.853830711s ago: executing program 3 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x7800, 0x80, 0x3, 0xd4d, {{0x24, 0x4, 0x2, 0x3, 0x90, 0x67, 0x0, 0xb1, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@cipso={0x86, 0x54, 0x3, [{0x1, 0x10, "aa54d62d455297358f2ad41b2518"}, {0x2, 0x4, "1eec"}, {0x0, 0x10, "bf1eae714999099176d7f73de137"}, {0x7, 0xb, "ac95b0c5985d109b2f"}, {0x1, 0x2}, {0x6, 0xf, "c67d30a373ceb0458081a0f138"}, {0x1, 0xe, "39e232bdf443bf415368be12"}]}, @noop, @ssrr={0x89, 0x27, 0xfc, [@loopback, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010100, @broadcast, @remote, @remote, @multicast1]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r6, @ANYBLOB="060929bd7000fbdbdf25070000004000018008000700", @ANYRES32=r7, @ANYBLOB="080006000400000014000400fe8000000000000000000000000000bb060005004e20000008000700", @ANYRES32=r8, @ANYBLOB="060001000200000008000400000400000500050007000000080004006b00000008000400400000003c00068008000700", @ANYRES32=r9, @ANYBLOB="0800060012000000060005004e20000008000700", @ANYRES32=r10, @ANYBLOB="3c0001000a0000000500020008000014080018e71122492286a2d1ed03000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="08000900680eee93ecfabfb46487f175a9709310d2fff6380aa10a82c8a55ed971a19e66a7b375926f0e135e789b018443da33f2f54baa0e1e23003516ed3ab06f47fd71a9cec63e", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r13, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r14, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r14, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x4040011}, 0x4004800) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e24, 0x0, 0x4e23, 0x9, 0x2, 0x20, 0x0, 0x33, r10, r13}, {0x200, 0x1bc3b63d, 0x7fffffffffffffff, 0x3, 0x8, 0x7, 0xe6, 0x7}, {0xedd8, 0x4, 0x5, 0x3}, 0x5, 0x6e6bbe, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d5, 0xff}, 0x2, @in=@broadcast, 0x63b0, 0x4, 0x3, 0x7, 0x9, 0x7, 0xa}}, 0xe8) 1.840747086s ago: executing program 1 (id=932): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.838420591s ago: executing program 2 (id=933): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000007, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0xb8c887aaa3abc53b, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r8, &(0x7f00000000c0)={0x67446698, 0x1, 0x2, 0x0, 0x1, "246f57a4214c67eb4d1d4a39a3a7"}, 0x1e) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x9}, &(0x7f0000000180)=0x10) 1.774695454s ago: executing program 3 (id=934): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) 1.648015845s ago: executing program 1 (id=935): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007065574d000000000000000071100200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1bc, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xae3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xad1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @remote, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) 1.587354664s ago: executing program 3 (id=936): syz_init_net_socket$bt_rfcomm(0x1f, 0xd2e31c7408b0d17, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ae8ce3462f2c810919d1c7a58a000010000000000000000000000100010000d0407845014f736c0a3cb63ddb11ca863089b3d743f5c6c7b8ecf607c3aaba985eebc6cf8aac84e8527bc1511b7a374d99843b6e4abf5479efeaf8239bb6323c8d8603849126c934fa42079393573288261b99ba46f5fc53c0b6ad96f88c42b49ca20280cf76f25d0259f6db220ffdbc01c178e609897f2bc2e24a0c8adbc60ed8eb51a84cd65f969a7fb004368a79e3303dfa41d4be9bae9576e9bbf36d8d72ea2d546e78cf0a94e55fdb057cba"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)}, 0x20) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000015c0)={0x434, 0x3f3, 0x200, 0x70bd27, 0x25dfdbff, {0x6, 0x0, 0x1f, [0x2645, 0x6, 0xf23b, 0x8000, 0x4, 0x6, 0x4, 0xc, 0x4, 0x4, 0x5ac, 0x3, 0x7, 0x1, 0xee9, 0x9, 0x6, 0xff, 0x2d4, 0x8000, 0x7, 0x4, 0x3f, 0x7fffffff, 0xffff, 0x8000, 0x0, 0x5, 0x101, 0x8001, 0x4, 0xf, 0x1, 0xc9a, 0x2, 0x5, 0x7, 0x8001, 0x3, 0xc00000, 0x3, 0x100, 0x0, 0x8001, 0x4, 0x81, 0x3, 0x8, 0x7, 0x4, 0x4, 0x7, 0x2, 0x3, 0x7, 0xf, 0xd, 0x1, 0x9, 0x1, 0x8, 0x2, 0x6, 0x6], [0x7, 0xfffffffc, 0x100, 0x7dba, 0x2, 0x4, 0x0, 0x3, 0xe60, 0x70a6, 0x6, 0xa, 0x8, 0xd, 0xffffffff, 0x15, 0x2, 0x800, 0xb1, 0x7, 0x5, 0x6, 0x3, 0xfa12, 0x7, 0x52e6, 0x2, 0x2, 0x0, 0xfe2c, 0x1, 0xfffffff9, 0x9, 0x0, 0x10001, 0x0, 0x4, 0x6, 0xa, 0x1, 0x0, 0x9, 0xc1b, 0x9, 0x8, 0xff, 0x4e, 0xcc61, 0xde9, 0xd925, 0xbba0, 0x3, 0x4, 0xffffff62, 0x673fc9a7, 0x8, 0x8, 0x0, 0x9, 0xd, 0x8, 0x9, 0x33, 0x6], [0x1, 0x8, 0x492, 0x1ff, 0xffffffc9, 0xfffffff5, 0x3ff, 0x8000, 0x2, 0x7, 0x5, 0x5, 0x4, 0x7, 0x6, 0x1, 0x80000000, 0x4, 0xfffffff8, 0x0, 0x3b67c000, 0x9, 0xffffff25, 0x10, 0x0, 0x2, 0x6d0e, 0x3, 0x8, 0x1, 0x3, 0x0, 0x1000, 0x800, 0x6, 0x80000000, 0x8000, 0x1, 0x4, 0x7, 0x2, 0x7fff, 0x4, 0x4, 0x5, 0x4, 0x5, 0x2, 0x1, 0x4, 0x7, 0x8, 0xffffffff, 0x8, 0x4, 0x0, 0x8, 0x4, 0x5, 0xfb1, 0x6b, 0x1000, 0x80000000, 0x5], [0x2, 0x4, 0xf4, 0x8, 0x4, 0x0, 0xfd, 0x6, 0x7, 0x6, 0x1, 0xb, 0x100, 0x8, 0xa13a, 0x81, 0xc5a, 0xe8, 0x0, 0x4, 0xff, 0x10001, 0x5, 0x5, 0x4, 0x7, 0x401, 0xff, 0x6, 0x4, 0x5, 0x3, 0x8, 0x48, 0x4, 0xffffffff, 0x81, 0x101, 0x0, 0xfffffff7, 0x3, 0x3, 0x1, 0x80, 0x0, 0x9, 0x40, 0x8, 0xd, 0x20000, 0x401, 0x8, 0xfffffffe, 0xc, 0x0, 0x4, 0x1, 0x81, 0x5, 0x6, 0x101, 0x958, 0x49c, 0x8], 0x13, ['\x00', 'K\x00', 'syztnl1\x00', 'syztnl1\x00']}, ["", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', r4, 0x8, 0x8010, 0x0, 0x8001, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x67, 0x0, 0x8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp={0x44, 0x10, 0x3e, 0x0, 0xc, [0x401, 0x100, 0xfff]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x3, [{@multicast2, 0x7fff}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xdd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x1}]}, @noop, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0xf, "86b537a0cb390f768007642225"}, {0x5, 0xa, "e9b743703ecb3a81"}, {0x2, 0x11, "c1c4f70c2512532d06c5dac044a31a"}, {0x0, 0x2}]}, @rr={0x7, 0x13, 0x6e, [@empty, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) 1.544577783s ago: executing program 2 (id=937): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}, "a4b4e4eb6807f85e"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000000000000002000700000000000200000008000e000000a38ee2df2760d94a8a4e4d2534f076907c8b3762e234d0b8debe65f7adff674a146c2c536201005e114332d83947e9e4a8cfeb1059c2d3688e30f61feb81dbea739edb3555f4c4338c33ef6fd3238c61206b7b9a5d6f46222a26a4951d"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.384122772s ago: executing program 1 (id=938): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x1, 0x0, 0xe00000000, 0x40, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f538eba}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) 622.591625ms ago: executing program 3 (id=939): r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000080)=0x6e) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000040a0303000000000000000004000006080007006e617400340008800d768c5e21c70541827e44c87ed9180c00014000000000000000060c00014000000000000000800c0002400000000000000000f051dbf9e6f09eadc473f307ade2c61b28333bbe035235bf996c43865b1ff146500ad5dbb74f3e735086eaa21b7afe16bafd851975e94cc7c8225c5f403d81d6f8ae54122cc85ac2d0b35145817464fdf84dd8085044d696abcd5550107a652b17f6"], 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x1) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb7399e61d3f0d589f0000180000001800000004000000020000000000000c02000000000000000000000d00000000005f0000"], 0x0, 0x34}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf2) (async) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000340)='FREEZING\x00', 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x28, r9, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x28}}, 0x0) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (rerun: 64) write$tun(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async, rerun: 32) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0xff80, 0x80, 0x47, 0x3}]}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 603.079038ms ago: executing program 2 (id=940): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08288965827f2226f5d96eb30000000200000001000000d1010000ff0700180400", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000003000000020000000400"/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000f70400000000005f00"], 0x0, 0x28}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r5, 0x8, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2e}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 428.240695ms ago: executing program 1 (id=941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x57a500b9b82fd89, 0x0, 0x25dfdbfd, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x60, 0x1d}, {0xfffffffffffffffe, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {}, 0xfffffffc, 0x6e6bb4}}}, 0xc0}}, 0x0) 329.183844ms ago: executing program 1 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89f2, &(0x7f0000000200)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)="7ecd815f7cd3b04961729b9867cdb457c3aaeb810462d70e3f42ac3bd0b676346da01c81ab3f7ec7aa2b5461421a8f621eb00de31697eee7770b20fbea0a0657e9baedf7c5ea5a3a5856779b4c7da269bb299385a9d1f1bd5c2cdcc90b2c1cff65c86410e695e472004992a26733f154395c388af25d20df057df2911e0ab0eaee03fdea12d3de93e92d651f05e6ef97efe9a6b2b3935dbd061c2845e6ab8f289d096e22e15af857fb09", 0xaa}, {&(0x7f0000000240)="5ae7b087929ec2bf0ab11604691f8171e665108f4496c502d9fe475ba11b37d023b9057e47438d3d27149412a7d03bf2772d963d0b620504ebc1669cd7b82733af23404d96f900bdcc5018b9325c785a8ee81c7aac6662446d12c0e8ea991e7c2b4c56a0ec08a63da585dc6dd82a26a8a4967e5a91b743ce5ccc5243961be7c0db902f05102d005cfc564aacc0d6f0a0b95afb9e9405c982aec9bb1ff49eb51a3a991a32c99a016563e8008bbab1db0b72", 0xb1}, {&(0x7f0000000300)="e8df0e3d6b1b554a4c873916a698d878520e90b4ec753484c2e03c5f140379c064ab8d941660134212cd0a4717d96f0b781a45859642562de7dcf00d4d3716ad841c843684bbef4f3cab9753007194e01924dc87d74cccce78b5234f9da35ca996c55919c20c1d7eb9db874cfc7efc816ab34b893162ca12148a86ae6d3c7a2b4762b3c4f0e4322ec7e1167ca0da72ef66d2c2ea5560923acaf5e04b", 0x9c}, {&(0x7f0000000180)="68ba7a43d9895a70c0559550b3fae9cd4d8422190afeb1299d5a5d83145d1a47a9e2fd841fef081b4d4290820303f9eb", 0x30}, {&(0x7f00000003c0)="34e3f0559f2eed2e244f75c4d58237ad4070bbd3ebb3e5d2fc69ff27caacaeda040504f146a06899570838e417e7b32916d415ad4a72275319a9c0ca8e2f886ae47014795b98f68858ef8cda057995d3bacf33b42060d8232356ef762129cd47c22582fdd81e630db8144d6fc22af86fdf30dfd09aada482286eb0b7f33f4009c6562842171c2b05b7c36f00d65c44290a726b494c16611b1c5640f1dcb9e221b8b63aa2119a714af992fce76dff7e54c61f67c54bf77834906d9d042b63d1f9154621aeea4e560cc8", 0xc9}], 0x5, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x34}}], 0x18}, 0x2005884d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) read$alg(r7, &(0x7f0000000580)=""/156, 0x9c) sendfile(r4, r1, 0x0, 0x3) 316.742686ms ago: executing program 3 (id=943): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7, 0x7, 0x0, 0x6, {{0xd, 0x4, 0x3, 0x13, 0x34, 0x67, 0x0, 0xa, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1a, 0x1, [{0x7, 0xb, "0f7739f35bb8e4b985"}, {0x6, 0x9, "f13db36fbe6676"}]}]}}}}}) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x2, 0x20004086) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000001040)={0x0, 0x6, 0xfff9, 0xd, 0x3, 0x0, 0x7fff}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x5, @none, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000003c0)=0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x0, '\x00', r3, @fallback=0xe}, 0x94) 184.093769ms ago: executing program 2 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xbe}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) 115.593067ms ago: executing program 3 (id=945): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 0s ago: executing program 2 (id=946): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x13, 0xfb, 0x5, 0x2, 0x0, 0x70bd28, 0xeedc}, 0x10}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): T5840] bridge_slave_1: entered allmulticast mode [ 96.496824][ T5840] bridge_slave_1: entered promiscuous mode [ 96.528638][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 96.573815][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.583283][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.591111][ T5837] bridge_slave_0: entered allmulticast mode [ 96.598769][ T5837] bridge_slave_0: entered promiscuous mode [ 96.646487][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.653812][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.661431][ T5837] bridge_slave_1: entered allmulticast mode [ 96.669100][ T5837] bridge_slave_1: entered promiscuous mode [ 96.731724][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.745795][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.792571][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.799930][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.807983][ T5832] bridge_slave_0: entered allmulticast mode [ 96.815734][ T5832] bridge_slave_0: entered promiscuous mode [ 96.882714][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.896237][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.912268][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.920508][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.927992][ T5832] bridge_slave_1: entered allmulticast mode [ 96.936157][ T5832] bridge_slave_1: entered promiscuous mode [ 96.943639][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.950814][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.958280][ T5836] bridge_slave_0: entered allmulticast mode [ 96.965722][ T5836] bridge_slave_0: entered promiscuous mode [ 96.976653][ T5840] team0: Port device team_slave_0 added [ 97.024539][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.031746][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.039487][ T5836] bridge_slave_1: entered allmulticast mode [ 97.047102][ T5836] bridge_slave_1: entered promiscuous mode [ 97.057601][ T5840] team0: Port device team_slave_1 added [ 97.080504][ T5837] team0: Port device team_slave_0 added [ 97.149855][ T5837] team0: Port device team_slave_1 added [ 97.187090][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.201026][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.253778][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.261566][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.269287][ T5849] bridge_slave_0: entered allmulticast mode [ 97.277096][ T5849] bridge_slave_0: entered promiscuous mode [ 97.302728][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.306265][ T5842] Bluetooth: hci0: command tx timeout [ 97.320345][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.330759][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.338507][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.364771][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.379520][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.386715][ T5842] Bluetooth: hci1: command tx timeout [ 97.392124][ T5847] Bluetooth: hci3: command tx timeout [ 97.392617][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.423902][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.437075][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.444060][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.470144][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.479256][ T5842] Bluetooth: hci4: command tx timeout [ 97.480759][ T5847] Bluetooth: hci2: command tx timeout [ 97.492439][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.499912][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.507189][ T5849] bridge_slave_1: entered allmulticast mode [ 97.514524][ T5849] bridge_slave_1: entered promiscuous mode [ 97.550490][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.557698][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.584775][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.620576][ T5832] team0: Port device team_slave_0 added [ 97.630723][ T5832] team0: Port device team_slave_1 added [ 97.659827][ T5836] team0: Port device team_slave_0 added [ 97.670480][ T5836] team0: Port device team_slave_1 added [ 97.738416][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.776757][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.783788][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.810254][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.823972][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.831064][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.857995][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.885517][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.934560][ T5840] hsr_slave_0: entered promiscuous mode [ 97.941162][ T5840] hsr_slave_1: entered promiscuous mode [ 97.949450][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.957036][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.983291][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.997142][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.004246][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.030891][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.060322][ T5837] hsr_slave_0: entered promiscuous mode [ 98.066889][ T5837] hsr_slave_1: entered promiscuous mode [ 98.073155][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.081082][ T5837] Cannot create hsr debugfs directory [ 98.126725][ T5849] team0: Port device team_slave_0 added [ 98.170648][ T5849] team0: Port device team_slave_1 added [ 98.198406][ T5832] hsr_slave_0: entered promiscuous mode [ 98.205340][ T5832] hsr_slave_1: entered promiscuous mode [ 98.211621][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.219309][ T5832] Cannot create hsr debugfs directory [ 98.317850][ T5836] hsr_slave_0: entered promiscuous mode [ 98.324697][ T5836] hsr_slave_1: entered promiscuous mode [ 98.331576][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.339898][ T5836] Cannot create hsr debugfs directory [ 98.366917][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.373928][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.401431][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.446921][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.453983][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.480462][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.759121][ T5849] hsr_slave_0: entered promiscuous mode [ 98.766139][ T5849] hsr_slave_1: entered promiscuous mode [ 98.772349][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.780650][ T5849] Cannot create hsr debugfs directory [ 99.161166][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.176433][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.215176][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.236656][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.278289][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.302566][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.319849][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.327789][ T9] cfg80211: failed to load regulatory.db [ 99.369338][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.385190][ T5847] Bluetooth: hci0: command tx timeout [ 99.446845][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.461736][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.468677][ T5847] Bluetooth: hci1: command tx timeout [ 99.476975][ T5847] Bluetooth: hci3: command tx timeout [ 99.496591][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.515682][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.545083][ T5847] Bluetooth: hci4: command tx timeout [ 99.560985][ T5847] Bluetooth: hci2: command tx timeout [ 99.641508][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.686417][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.724634][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.740114][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.807185][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.819887][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.831989][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.848337][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.861731][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.918124][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.948354][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.955883][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.012554][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.019755][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.077228][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.149504][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.207370][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.214610][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.231259][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.257037][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.264258][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.317719][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.362103][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.393084][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.411958][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.440941][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.448196][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.493547][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.517774][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.538327][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.545547][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.599583][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.606891][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.636733][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.643938][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.670339][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.753679][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.760979][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.776126][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.783397][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.930166][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.030609][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.187459][ T5840] veth0_vlan: entered promiscuous mode [ 101.250708][ T5840] veth1_vlan: entered promiscuous mode [ 101.408127][ T5840] veth0_macvtap: entered promiscuous mode [ 101.467433][ T5847] Bluetooth: hci0: command tx timeout [ 101.486323][ T5840] veth1_macvtap: entered promiscuous mode [ 101.517489][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.545565][ T5847] Bluetooth: hci3: command tx timeout [ 101.546342][ T5842] Bluetooth: hci1: command tx timeout [ 101.631627][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.637841][ T5842] Bluetooth: hci2: command tx timeout [ 101.641442][ T5847] Bluetooth: hci4: command tx timeout [ 101.656838][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.689893][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.700053][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.709841][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.718987][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.736969][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.816771][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.837642][ T5832] veth0_vlan: entered promiscuous mode [ 101.899449][ T5832] veth1_vlan: entered promiscuous mode [ 101.994397][ T5837] veth0_vlan: entered promiscuous mode [ 102.009822][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.034470][ T5849] veth0_vlan: entered promiscuous mode [ 102.038733][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.059841][ T5836] veth0_vlan: entered promiscuous mode [ 102.098965][ T5837] veth1_vlan: entered promiscuous mode [ 102.116443][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.124738][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.139989][ T5849] veth1_vlan: entered promiscuous mode [ 102.150805][ T5836] veth1_vlan: entered promiscuous mode [ 102.182573][ T5832] veth0_macvtap: entered promiscuous mode [ 102.219865][ T5832] veth1_macvtap: entered promiscuous mode [ 102.235902][ T5837] veth0_macvtap: entered promiscuous mode [ 102.264015][ T5837] veth1_macvtap: entered promiscuous mode [ 102.290572][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.328238][ T5849] veth0_macvtap: entered promiscuous mode [ 102.342657][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.381778][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.404447][ T5849] veth1_macvtap: entered promiscuous mode [ 102.452369][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.465133][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.473912][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.483693][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.504774][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.518627][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.538163][ T5836] veth0_macvtap: entered promiscuous mode [ 102.567044][ T5836] veth1_macvtap: entered promiscuous mode [ 102.593795][ T5956] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 102.621251][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.629225][ T5956] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.631786][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.646266][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.655946][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.687357][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.740011][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.812869][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.824285][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.869071][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878408][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.888310][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.897488][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.913390][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.923314][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.932213][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.947404][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.032088][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.043615][ T5961] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 103.046433][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.113579][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.122606][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.233424][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.250167][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.374705][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.397778][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.451069][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.476035][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.545272][ T5847] Bluetooth: hci0: command tx timeout [ 103.594186][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.626895][ T5847] Bluetooth: hci3: command tx timeout [ 103.631136][ T5842] Bluetooth: hci1: command tx timeout [ 103.645748][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.705187][ T5842] Bluetooth: hci2: command tx timeout [ 103.706703][ T5847] Bluetooth: hci4: command tx timeout [ 103.733749][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.796144][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.881963][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.904360][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.920750][ T5975] Zero length message leads to an empty skb [ 104.085996][ T5980] netlink: 'syz.4.10': attribute type 1 has an invalid length. [ 104.093934][ T5980] netlink: 'syz.4.10': attribute type 2 has an invalid length. [ 104.231448][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 104.263757][ T5980] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10'. [ 104.298297][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.585337][ T5994] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13'. [ 104.594494][ T5994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 104.712465][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 104.797008][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 105.026494][ T6011] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.373248][ T6028] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 105.715724][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.008712][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 106.323445][ T6072] netlink: 'syz.4.38': attribute type 2 has an invalid length. [ 106.331268][ T6072] netlink: 244 bytes leftover after parsing attributes in process `syz.4.38'. [ 106.452600][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 106.520822][ T6078] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 106.555649][ T6078] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.571276][ T6079] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 106.622312][ T6078] veth0: entered promiscuous mode [ 106.633920][ T6078] macvtap1: entered promiscuous mode [ 106.650084][ T6078] macvtap1: entered allmulticast mode [ 106.657934][ T6078] veth0: entered allmulticast mode [ 107.022193][ T6098] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 107.160503][ T6102] x_tables: duplicate underflow at hook 1 [ 107.332802][ T6111] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 107.504259][ T6113] team0: entered promiscuous mode [ 107.529734][ T6113] team_slave_0: entered promiscuous mode [ 107.553722][ T6113] team_slave_1: entered promiscuous mode [ 107.617354][ T6112] team0: left promiscuous mode [ 107.641750][ T6112] team_slave_0: left promiscuous mode [ 107.670269][ T6112] team_slave_1: left promiscuous mode [ 107.902498][ T6141] netlink: 52 bytes leftover after parsing attributes in process `syz.0.59'. [ 107.937398][ T6140] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 108.125881][ T6145] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.205037][ T6151] x_tables: duplicate underflow at hook 1 [ 108.495903][ T6160] team_slave_0: mtu greater than device maximum [ 108.762948][ T6171] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.991608][ T5204] udevd[5204]: worker [5887] terminated by signal 33 (Unknown signal 33) [ 109.016072][ T6179] netlink: 'syz.0.77': attribute type 9 has an invalid length. [ 109.030171][ T5204] udevd[5204]: worker [5887] failed while handling '/devices/virtual/block/loop0' [ 109.067659][ T5204] udevd[5204]: worker [5893] terminated by signal 33 (Unknown signal 33) [ 109.069107][ T6183] x_tables: unsorted entry at hook 2 [ 109.097610][ T5204] udevd[5204]: worker [5893] failed while handling '/devices/virtual/block/loop1' [ 109.113909][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.125332][ T6179] netlink: 'syz.0.77': attribute type 9 has an invalid length. [ 110.219541][ T6225] atomic_op ffff88806abac998 conn xmit_atomic 0000000000000000 [ 110.261405][ T6233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.472485][ T6238] __nla_validate_parse: 4 callbacks suppressed [ 110.472521][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 110.500847][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 110.769985][ T6252] lo speed is unknown, defaulting to 1000 [ 110.822591][ T6252] lo speed is unknown, defaulting to 1000 [ 110.871371][ T6252] lo speed is unknown, defaulting to 1000 [ 110.994076][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 111.041170][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 111.119227][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.101'. [ 111.163106][ T6268] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 111.177751][ T6268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.271765][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 111.328723][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.103'. [ 111.395249][ T6276] gretap1: entered promiscuous mode [ 111.425377][ T6276] gretap1: entered allmulticast mode [ 111.660941][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 111.675894][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 111.735949][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 111.863790][ T6252] infiniband syz0: set active [ 111.887013][ T6252] infiniband syz0: added lo [ 111.898172][ T44] lo speed is unknown, defaulting to 1000 [ 111.916978][ T6252] syz0: rxe_create_cq: returned err = -12 [ 111.932255][ T6252] infiniband syz0: Couldn't create ib_mad CQ [ 111.939785][ T6252] infiniband syz0: Couldn't open port 1 [ 112.032190][ T6252] RDS/IB: syz0: added [ 112.064697][ T6252] smc: adding ib device syz0 with port count 1 [ 112.123256][ T6252] smc: ib device syz0 port 1 has pnetid [ 112.136362][ T44] lo speed is unknown, defaulting to 1000 [ 112.159302][ T6252] lo speed is unknown, defaulting to 1000 [ 112.511689][ T6314] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 113.064427][ T6345] sctp: [Deprecated]: syz.4.124 (pid 6345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.064427][ T6345] Use struct sctp_sack_info instead [ 113.096368][ T6347] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 113.175946][ T6348] netlink: 'syz.3.127': attribute type 15 has an invalid length. [ 113.291599][ T6347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.367455][ T6252] lo speed is unknown, defaulting to 1000 [ 113.894542][ T6369] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 113.988340][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.020364][ T6369] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 114.132501][ T6252] lo speed is unknown, defaulting to 1000 [ 114.277380][ T6381] netlink: 'syz.1.139': attribute type 3 has an invalid length. [ 114.722956][ T1544] IPVS: starting estimator thread 0... [ 114.738242][ T6394] netlink: 'syz.1.144': attribute type 7 has an invalid length. [ 114.816366][ T6399] IPVS: using max 30 ests per chain, 72000 per kthread [ 115.050249][ T6415] veth0: entered promiscuous mode [ 115.101578][ T6414] veth0: left promiscuous mode [ 115.170235][ T6252] lo speed is unknown, defaulting to 1000 [ 115.684255][ T6434] __nla_validate_parse: 72 callbacks suppressed [ 115.684278][ T6434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.156'. [ 115.736021][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 115.756489][ T6437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.764961][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 116.180703][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 116.305478][ T6464] Bluetooth: MGMT ver 1.23 [ 116.527777][ T6252] lo speed is unknown, defaulting to 1000 [ 116.783764][ T6486] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 117.001248][ T6496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 117.241552][ T6507] openvswitch: netlink: IPv6 tunnel dst address is zero [ 117.591904][ T6519] dvmrp0: entered allmulticast mode [ 117.807494][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.180'. [ 117.818572][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 117.897193][ T6531] nbd: must specify a size in bytes for the device [ 118.111348][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 118.123666][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 118.162744][ T6546] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 118.171898][ T6546] IPv6: NLM_F_REPLACE set, but no existing node found! [ 118.303929][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 118.347726][ T5847] Bluetooth: hci0: command tx timeout [ 118.377316][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.192'. [ 119.073776][ T6605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.916265][ T6653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 120.171521][ T6665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.630402][ T6692] sctp: [Deprecated]: syz.0.235 (pid 6692) Use of int in max_burst socket option deprecated. [ 120.630402][ T6692] Use struct sctp_assoc_value instead [ 120.983871][ T6713] !: renamed from dummy0 (while UP) [ 120.993457][ T6717] __nla_validate_parse: 12 callbacks suppressed [ 120.993476][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 121.053636][ T6721] tunl0: entered promiscuous mode [ 121.082451][ T6721] netlink: 9 bytes leftover after parsing attributes in process `syz.4.246'. [ 121.439655][ T6747] netlink: 'syz.1.254': attribute type 23 has an invalid length. [ 121.939318][ T6771] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 121.973158][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 121.985123][ T6771] netlink: 56 bytes leftover after parsing attributes in process `syz.0.264'. [ 122.002937][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 122.321473][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 122.411670][ T6800] lo speed is unknown, defaulting to 1000 [ 122.761064][ T6814] syzkaller0: entered promiscuous mode [ 122.771634][ T6814] syzkaller0: entered allmulticast mode [ 122.831432][ T6814] tipc: Started in network mode [ 122.837577][ T6814] tipc: Node identity 3ec3577fa748, cluster identity 4711 [ 122.848977][ T6814] tipc: Enabled bearer , priority 0 [ 122.874834][ T6813] tipc: Resetting bearer [ 122.903768][ T6813] tipc: Disabling bearer [ 123.055657][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 123.453494][ T6834] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.484971][ T6837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.285'. [ 123.508284][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 123.509963][ T6838] sit0: entered promiscuous mode [ 123.522739][ T6837] netlink: 31 bytes leftover after parsing attributes in process `syz.3.285'. [ 123.536929][ T6838] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 123.538647][ T6837] netlink: 'syz.3.285': attribute type 2 has an invalid length. [ 123.663546][ T6841] macvlan2: entered promiscuous mode [ 123.684357][ T6841] macvlan2: entered allmulticast mode [ 123.690716][ T6845] netlink: 'syz.1.289': attribute type 3 has an invalid length. [ 123.704471][ T6841] batadv0: entered promiscuous mode [ 123.732410][ T6841] batadv0: entered allmulticast mode [ 123.744188][ T6841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.778854][ T6841] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 123.905679][ T6852] tipc: Enabling of bearer rejected, failed to enable media [ 123.923382][ T6853] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.032474][ T6859] netlink: 'syz.0.295': attribute type 13 has an invalid length. [ 124.072940][ T6859] netlink: 'syz.0.295': attribute type 58 has an invalid length. [ 124.195746][ T6869] Bluetooth: MGMT ver 1.23 [ 124.652540][ T6899] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 124.720522][ T6901] netlink: 'syz.1.310': attribute type 14 has an invalid length. [ 124.979482][ T6916] netlink: 'syz.4.315': attribute type 9 has an invalid length. [ 125.038085][ T6923] openvswitch: netlink: EtherType 0 is less than min 600 [ 125.320719][ T6938] sctp: [Deprecated]: syz.4.320 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.320719][ T6938] Use struct sctp_sack_info instead [ 125.532843][ T6940] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.820633][ T6966] IPv6: sit1: Disabled Multicast RS [ 125.842828][ T6966] sit1: entered allmulticast mode [ 126.164877][ T6982] __nla_validate_parse: 7 callbacks suppressed [ 126.164897][ T6982] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.334'. [ 126.399215][ T6987] netlink: 104 bytes leftover after parsing attributes in process `syz.0.336'. [ 126.650899][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 126.971183][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 127.128774][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 127.152640][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 127.236242][ T7026] validate_nla: 3 callbacks suppressed [ 127.236280][ T7026] netlink: 'syz.2.348': attribute type 8 has an invalid length. [ 127.524013][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 127.577457][ T7042] vlan2: entered allmulticast mode [ 127.587436][ T7042] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 127.803550][ T7057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.928322][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.103258][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.145684][ T7060] netlink: 80 bytes leftover after parsing attributes in process `syz.4.361'. [ 128.281339][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.437912][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.489142][ T7068] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 128.502345][ T7068] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 128.630006][ T7074] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 128.648892][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.658296][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.666189][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.675105][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.683025][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.728219][ T7073] lo speed is unknown, defaulting to 1000 [ 128.979273][ T1009] bridge_slave_1: left allmulticast mode [ 129.007147][ T1009] bridge_slave_1: left promiscuous mode [ 129.013899][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.110464][ T1009] bridge_slave_0: left allmulticast mode [ 129.119407][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.662072][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.687805][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.701480][ T1009] bond0 (unregistering): Released all slaves [ 129.720940][ T1009] bond1 (unregistering): Released all slaves [ 130.710047][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 130.748506][ T5847] Bluetooth: hci0: command tx timeout [ 130.818113][ T1009] hsr_slave_0: left promiscuous mode [ 130.830130][ T1009] hsr_slave_1: left promiscuous mode [ 130.840300][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.848354][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.857183][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.864745][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.890358][ T1009] veth1_macvtap: left promiscuous mode [ 130.897066][ T1009] veth0_macvtap: left promiscuous mode [ 130.902749][ T1009] veth1_vlan: left promiscuous mode [ 130.908803][ T1009] veth0_vlan: left promiscuous mode [ 131.428228][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 131.468180][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 131.829897][ T4430] smc: removing ib device syz0 [ 131.861326][ T7151] tipc: Started in network mode [ 131.869932][ T7151] tipc: Node identity fe6f7ada2a3f, cluster identity 4711 [ 131.882086][ T7151] tipc: Enabled bearer , priority 0 [ 131.893983][ T1544] lo speed is unknown, defaulting to 1000 [ 131.916892][ T1544] syz0: Port: 1 Link DOWN [ 132.185389][ T7151] tipc: Disabling bearer [ 132.264270][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.391'. [ 132.267966][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 132.273346][ T7171] netlink: 272 bytes leftover after parsing attributes in process `syz.3.391'. [ 132.293893][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 132.612779][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.625132][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.642729][ T7073] bridge_slave_0: entered allmulticast mode [ 132.693226][ T7073] bridge_slave_0: entered promiscuous mode [ 132.801898][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.825215][ T5847] Bluetooth: hci0: command tx timeout [ 132.841736][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.850489][ T7073] bridge_slave_1: entered allmulticast mode [ 132.860303][ T7073] bridge_slave_1: entered promiscuous mode [ 133.190667][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.233253][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.307066][ T7212] trusted_key: syz.4.405 sent an empty control message without MSG_MORE. [ 133.502491][ T7073] team0: Port device team_slave_0 added [ 133.563475][ T7073] team0: Port device team_slave_1 added [ 133.734485][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.744652][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.789624][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.803425][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.812825][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.846816][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.094700][ T7073] hsr_slave_0: entered promiscuous mode [ 134.112749][ T7073] hsr_slave_1: entered promiscuous mode [ 134.121150][ T7073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.134041][ T7073] Cannot create hsr debugfs directory [ 134.176509][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 134.363307][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 134.481949][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 134.593667][ T7254] netlink: 'syz.2.418': attribute type 9 has an invalid length. [ 134.616728][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 134.685158][ T7254] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.418'. [ 134.863396][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 134.905059][ T5847] Bluetooth: hci0: command tx timeout [ 135.161131][ T7270] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 135.255707][ T7269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.264696][ T7269] bond2: (slave bond3): making interface the new active one [ 135.274068][ T7269] bond2: (slave bond3): Enslaving as an active interface with an up link [ 135.492748][ T7073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.513410][ T7073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.529750][ T7073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.563083][ T7073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.599385][ T7283] vlan3: entered promiscuous mode [ 135.604519][ T7283] bridge2: entered promiscuous mode [ 135.611967][ T7283] vlan3: entered allmulticast mode [ 135.620452][ T7283] bridge2: entered allmulticast mode [ 135.842724][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.885237][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.902009][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.909234][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.932792][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.940050][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.466250][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.579590][ T7073] veth0_vlan: entered promiscuous mode [ 136.607623][ T7073] veth1_vlan: entered promiscuous mode [ 136.799286][ T7346] sctp: [Deprecated]: syz.4.445 (pid 7346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.799286][ T7346] Use struct sctp_sack_info instead [ 136.842053][ T7348] openvswitch: netlink: Flow key attr not present in new flow. [ 136.985360][ T5847] Bluetooth: hci0: command tx timeout [ 137.003290][ T7355] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 137.041444][ T7073] veth0_macvtap: entered promiscuous mode [ 137.099235][ T7073] veth1_macvtap: entered promiscuous mode [ 137.187141][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.212267][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.269684][ T7073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.296265][ T7073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.325423][ T7073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.344933][ T7073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.562289][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.602232][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.667814][ T7381] openvswitch: netlink: Flow key attr not present in new flow. [ 137.685844][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.700138][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.769009][ T7386] __nla_validate_parse: 8 callbacks suppressed [ 137.769030][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 137.805225][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 138.124307][ T7400] sit0: left promiscuous mode [ 138.257429][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.523466][ T7425] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.576821][ T7427] netlink: 256 bytes leftover after parsing attributes in process `syz.3.466'. [ 138.604650][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.629875][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.666557][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 138.757173][ T7400] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.767468][ T7400] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.785174][ T7400] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.794253][ T7400] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.822515][ T7400] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 138.935219][ T7400] syz.1.461 (7400) used greatest stack depth: 19928 bytes left [ 138.972463][ T7427] batman_adv: batadv0: Adding interface: ipvlan2 [ 138.979599][ T7427] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.013928][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.058675][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.088558][ T7427] batman_adv: batadv0: Interface activated: ipvlan2 [ 139.228586][ T7442] openvswitch: netlink: IP tunnel dst address not specified [ 139.379140][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.432183][ T7444] netlink: 'syz.4.469': attribute type 3 has an invalid length. [ 139.615524][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 139.669398][ T7452] netlink: 128 bytes leftover after parsing attributes in process `syz.3.472'. [ 139.698766][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'. [ 139.723809][ T7453] netlink: 244 bytes leftover after parsing attributes in process `syz.3.472'. [ 139.983027][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.066652][ T7477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 140.103413][ T7477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 140.271148][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.280647][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.322618][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.378640][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.394663][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.402651][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.413958][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.421906][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.571888][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.650126][ T4430] tipc: Subscription rejected, illegal request [ 140.862839][ T7506] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 140.999473][ T7506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.122069][ T61] bridge_slave_1: left allmulticast mode [ 141.129239][ T61] bridge_slave_1: left promiscuous mode [ 141.140403][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.168855][ T61] bridge_slave_0: left allmulticast mode [ 141.184944][ T61] bridge_slave_0: left promiscuous mode [ 141.196110][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.673775][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.686108][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.696973][ T61] bond0 (unregistering): Released all slaves [ 141.743225][ T7491] chnl_net:caif_netlink_parms(): no params data found [ 142.195222][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.208275][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.217958][ T7491] bridge_slave_0: entered allmulticast mode [ 142.232382][ T7491] bridge_slave_0: entered promiscuous mode [ 142.250037][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.261128][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.289178][ T7491] bridge_slave_1: entered allmulticast mode [ 142.307005][ T7491] bridge_slave_1: entered promiscuous mode [ 142.359180][ T61] hsr_slave_0: left promiscuous mode [ 142.378576][ T61] hsr_slave_1: left promiscuous mode [ 142.395241][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.402737][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.411358][ T7561] netlink: 'syz.3.501': attribute type 28 has an invalid length. [ 142.435345][ T7561] netlink: 'syz.3.501': attribute type 3 has an invalid length. [ 142.458111][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.475848][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.509771][ T5842] Bluetooth: hci0: command tx timeout [ 142.553065][ T61] veth1_macvtap: left promiscuous mode [ 142.573492][ T61] veth0_macvtap: left promiscuous mode [ 142.579252][ T61] veth1_vlan: left promiscuous mode [ 142.584708][ T61] veth0_vlan: left promiscuous mode [ 142.586440][ T7556] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 142.927931][ T7577] xt_hashlimit: size too large, truncated to 1048576 [ 143.219618][ T61] team0 (unregistering): Port device team_slave_1 removed [ 143.268056][ T61] team0 (unregistering): Port device team_slave_0 removed [ 143.679688][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.857567][ T7590] __nla_validate_parse: 4 callbacks suppressed [ 143.857592][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 143.925812][ T7577] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 143.979263][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.137706][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 144.163423][ T7491] team0: Port device team_slave_0 added [ 144.174042][ T7491] team0: Port device team_slave_1 added [ 144.330841][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.339267][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.390327][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.408364][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.424946][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.464585][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.482757][ T7621] bond0: entered promiscuous mode [ 144.489217][ T7621] bond_slave_0: entered promiscuous mode [ 144.495380][ T7621] bond_slave_1: entered promiscuous mode [ 144.501727][ T7621] batadv0: entered promiscuous mode [ 144.510617][ T7621] batadv_slave_0: entered promiscuous mode [ 144.516963][ T7621] batadv_slave_0: left promiscuous mode [ 144.547707][ T7621] bond0: left promiscuous mode [ 144.552581][ T7621] bond_slave_0: left promiscuous mode [ 144.574453][ T7621] bond_slave_1: left promiscuous mode [ 144.592152][ T7621] batadv0: left promiscuous mode [ 144.599576][ T5842] Bluetooth: hci0: command tx timeout [ 144.716968][ T7491] hsr_slave_0: entered promiscuous mode [ 144.724414][ T7491] hsr_slave_1: entered promiscuous mode [ 144.739337][ T7491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.751572][ T7491] Cannot create hsr debugfs directory [ 145.071561][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 145.330629][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 145.353253][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.522'. [ 145.358384][ T7491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.367500][ T7626] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 145.395693][ T7491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.415342][ T7491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.459383][ T7491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.646257][ T7665] syzkaller0: entered allmulticast mode [ 145.683454][ T7665] syzkaller0 (unregistering): left allmulticast mode [ 145.733273][ T7671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.754451][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 145.903110][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.945787][ T7680] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 145.959388][ T7678] tipc: New replicast peer: 0.0.0.0 [ 145.978315][ T7678] tipc: Enabled bearer , priority 10 [ 146.000402][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 146.013542][ T7678] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 146.049713][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.157451][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.164688][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.225825][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.233169][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.428115][ T7701] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 146.441428][ T7694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.473454][ T7701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.539'. [ 146.493874][ T7712] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 146.519613][ T7701] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.531319][ T7701] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.541811][ T7701] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.563055][ T7701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.579247][ T7701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.588931][ T7701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.609865][ T7701] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 146.620477][ T7701] team0: Failed to send options change via netlink (err -105) [ 146.630154][ T7701] team0: Port device geneve0 added [ 146.675816][ T5842] Bluetooth: hci0: command 0x040f tx timeout [ 146.726480][ T7694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.764542][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.786571][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.546'. [ 146.830316][ T7722] ip6gretap0: entered promiscuous mode [ 146.840911][ T7722] syz_tun: entered promiscuous mode [ 146.881666][ T7694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.965480][ T7694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.076282][ T5897] tipc: Node number set to 2576045951 [ 147.354608][ T7694] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.397020][ T7694] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.452950][ T7694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.501043][ T7694] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.577451][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.724060][ T7748] bridge0: port 3(batadv1) entered blocking state [ 147.731704][ T7748] bridge0: port 3(batadv1) entered disabled state [ 147.743022][ T7748] batadv1: entered allmulticast mode [ 147.751386][ T7748] batadv1: entered promiscuous mode [ 147.801912][ T7491] veth0_vlan: entered promiscuous mode [ 147.851129][ T7491] veth1_vlan: entered promiscuous mode [ 148.072273][ T7491] veth0_macvtap: entered promiscuous mode [ 148.104451][ T7491] veth1_macvtap: entered promiscuous mode [ 148.225558][ T4430] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.235368][ T4430] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 148.248821][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.279958][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.360058][ T7491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.380977][ T7491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.412324][ T7491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.428531][ T7491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.630071][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.667565][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.748691][ T5842] Bluetooth: hci0: command 0x040f tx timeout [ 148.797092][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.809300][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.876763][ T7794] tipc: Started in network mode [ 148.881812][ T7794] tipc: Node identity 46a4631158a8, cluster identity 4711 [ 148.889350][ T7794] tipc: Enabled bearer , priority 0 [ 148.903901][ T7793] tipc: Disabling bearer [ 149.530008][ T4430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.531150][ T7824] netlink: 'syz.1.580': attribute type 11 has an invalid length. [ 149.557829][ T7824] netlink: 'syz.1.580': attribute type 11 has an invalid length. [ 149.569213][ T7824] __nla_validate_parse: 69 callbacks suppressed [ 149.569232][ T7824] netlink: 224 bytes leftover after parsing attributes in process `syz.1.580'. [ 149.679325][ T4430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.857359][ T7831] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 149.950967][ T4430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.026757][ T7836] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 150.151105][ T4430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.191706][ T7836] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 150.239490][ T7841] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 150.641463][ T4430] bridge_slave_1: left allmulticast mode [ 150.652622][ T4430] bridge_slave_1: left promiscuous mode [ 150.660773][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.698157][ T4430] bridge_slave_0: left allmulticast mode [ 150.704034][ T4430] bridge_slave_0: left promiscuous mode [ 150.721607][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.721763][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.740754][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.749005][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.758128][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.769503][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.808984][ T7858] can: request_module (can-proto-0) failed. [ 151.092965][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.104216][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.117714][ T4430] bond0 (unregistering): Released all slaves [ 151.226376][ T7871] netlink: 44 bytes leftover after parsing attributes in process `syz.3.593'. [ 151.275019][ T7871] netlink: 43 bytes leftover after parsing attributes in process `syz.3.593'. [ 151.306949][ T7871] netlink: 'syz.3.593': attribute type 6 has an invalid length. [ 151.318503][ T7871] netlink: 'syz.3.593': attribute type 5 has an invalid length. [ 151.351327][ T7871] netlink: 43 bytes leftover after parsing attributes in process `syz.3.593'. [ 151.531007][ T7884] netlink: 76 bytes leftover after parsing attributes in process `syz.4.597'. [ 151.829688][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.284145][ T4430] hsr_slave_0: left promiscuous mode [ 152.313427][ T4430] hsr_slave_1: left promiscuous mode [ 152.331715][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.348373][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.362659][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.371749][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.430281][ T4430] veth1_macvtap: left promiscuous mode [ 152.447437][ T4430] veth0_macvtap: left promiscuous mode [ 152.453176][ T4430] veth1_vlan: left promiscuous mode [ 152.467273][ T4430] veth0_vlan: left promiscuous mode [ 152.650850][ T7924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.605'. [ 152.670226][ T7925] raw_sendmsg: syz.4.604 forgot to set AF_INET. Fix it! [ 152.710025][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 152.834271][ T5847] Bluetooth: hci0: command tx timeout [ 152.949204][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055f2e400: rx timeout, send abort [ 153.297263][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 153.349904][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 153.453927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055eae400: rx timeout, send abort [ 153.462267][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055f2e400: abort rx timeout. Force session deactivation [ 153.908333][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 153.935503][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 153.962208][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888055eae400: abort rx timeout. Force session deactivation [ 154.063216][ T7969] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 154.185608][ T7972] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 154.640783][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.675290][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.696963][ T7864] bridge_slave_0: entered allmulticast mode [ 154.705166][ T7864] bridge_slave_0: entered promiscuous mode [ 154.764216][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.783307][ T7409] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 154.819610][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.843213][ T7864] bridge_slave_1: entered allmulticast mode [ 154.868819][ T7864] bridge_slave_1: entered promiscuous mode [ 154.901572][ T7409] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 154.915210][ T5847] Bluetooth: hci0: command tx timeout [ 155.140808][ T8026] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.153174][ T8020] veth0_virt_wifi: mtu less than device minimum [ 155.153792][ T8030] netlink: 'syz.2.628': attribute type 32 has an invalid length. [ 155.187796][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.215930][ T8025] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 155.224313][ T8025] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 155.299044][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.425211][ T8042] netlink: 68 bytes leftover after parsing attributes in process `syz.2.630'. [ 155.425903][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 155.449034][ T7864] team0: Port device team_slave_0 added [ 155.464577][ T7864] team0: Port device team_slave_1 added [ 155.518414][ T8039] xfrm2: entered promiscuous mode [ 155.523542][ T8039] xfrm2: entered allmulticast mode [ 155.894022][ T8055] veth3: entered promiscuous mode [ 155.909824][ T8055] veth3: entered allmulticast mode [ 155.929065][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.971454][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.057054][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.234278][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.258048][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.336792][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.632593][ T8080] netlink: 'syz.1.639': attribute type 11 has an invalid length. [ 156.803485][ T7864] hsr_slave_0: entered promiscuous mode [ 156.813642][ T7864] hsr_slave_1: entered promiscuous mode [ 156.820912][ T8092] sctp: [Deprecated]: syz.1.642 (pid 8092) Use of int in maxseg socket option. [ 156.820912][ T8092] Use struct sctp_assoc_value instead [ 156.831830][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.858723][ T7864] Cannot create hsr debugfs directory [ 156.943384][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 156.985254][ T5842] Bluetooth: hci0: command tx timeout [ 157.483530][ T8128] IPVS: length: 159 != 24 [ 157.496621][ T8125] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 157.498999][ T8130] netlink: 'syz.4.652': attribute type 21 has an invalid length. [ 157.518416][ T8130] netlink: 152 bytes leftover after parsing attributes in process `syz.4.652'. [ 157.769798][ T7864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.788428][ T7864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.813975][ T7864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.832367][ T7864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.008652][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.063924][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.085780][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.092998][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.114202][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.121529][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.248979][ T5837] syz_tun (unregistering): left promiscuous mode [ 158.360223][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.502842][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.639546][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.666203][ T7864] veth0_vlan: entered promiscuous mode [ 158.694293][ T7864] veth1_vlan: entered promiscuous mode [ 158.751141][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.884010][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.902074][ T7864] veth0_macvtap: entered promiscuous mode [ 158.917292][ T7864] veth1_macvtap: entered promiscuous mode [ 158.989205][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.038099][ T8182] x_tables: duplicate underflow at hook 1 [ 159.058054][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.067547][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 159.072297][ T7864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.082485][ T7864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.098676][ T7864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.107869][ T7864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.117828][ T8183] x_tables: duplicate underflow at hook 1 [ 159.170674][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.179722][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.188521][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.198394][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.206432][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.374960][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.382652][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.580370][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.613066][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.870566][ T8187] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.880204][ T8187] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.894577][ T8187] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.903779][ T8187] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.979020][ T8187] veth0: left allmulticast mode [ 159.984394][ T8187] macvtap1: left promiscuous mode [ 159.991433][ T8187] macvtap1: left allmulticast mode [ 160.018075][ T8187] vlan2: left allmulticast mode [ 160.023047][ T8187] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 160.069196][ T8187] vlan3: left promiscuous mode [ 160.074301][ T8187] bridge2: left promiscuous mode [ 160.080044][ T8187] vlan3: left allmulticast mode [ 160.085659][ T8187] bridge2: left allmulticast mode [ 160.093407][ T8187] veth3: left promiscuous mode [ 160.098994][ T8187] veth3: left allmulticast mode [ 160.217059][ T13] bridge_slave_1: left allmulticast mode [ 160.250315][ T13] bridge_slave_1: left promiscuous mode [ 160.267200][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.281552][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.667'. [ 160.298076][ T13] bridge_slave_0: left allmulticast mode [ 160.308653][ T13] bridge_slave_0: left promiscuous mode [ 160.311798][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 160.315493][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.410633][ T13] ip6gretap0 (unregistering): left promiscuous mode [ 160.545007][ T13] dvmrp0 (unregistering): left allmulticast mode [ 160.719674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.733730][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.749921][ T13] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 160.764023][ T13] batadv0: left allmulticast mode [ 160.771701][ T13] bond0 (unregistering): Released all slaves [ 160.970676][ T13] tipc: Disabling bearer [ 160.973215][ T8211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.987193][ T13] tipc: Left network mode [ 161.023432][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.043151][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.082763][ T8213] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20004 [ 161.146758][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 161.317553][ T5842] Bluetooth: hci2: command tx timeout [ 161.352192][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.378659][ T8221] netlink: 96 bytes leftover after parsing attributes in process `syz.1.673'. [ 161.385822][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.632514][ T13] hsr_slave_0: left promiscuous mode [ 161.653659][ T13] hsr_slave_1: left promiscuous mode [ 161.666631][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.674127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.725925][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.733951][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.756410][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 161.792731][ T13] veth1_macvtap: left promiscuous mode [ 161.798687][ T13] veth0_macvtap: left promiscuous mode [ 161.804371][ T13] veth1_vlan: left promiscuous mode [ 161.810241][ T13] veth0_vlan: left promiscuous mode [ 161.824585][ T8248] netlink: 'syz.2.680': attribute type 23 has an invalid length. [ 162.000417][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 162.274158][ T13] team0 (unregistering): Port device team_slave_1 removed [ 162.330031][ T13] team0 (unregistering): Port device team_slave_0 removed [ 163.085379][ T8184] chnl_net:caif_netlink_parms(): no params data found [ 163.173848][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 163.189907][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 163.204257][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 163.291188][ T8273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.686'. [ 163.377381][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.385227][ T5842] Bluetooth: hci2: command tx timeout [ 163.391158][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.399694][ T8184] bridge_slave_0: entered allmulticast mode [ 163.407539][ T8184] bridge_slave_0: entered promiscuous mode [ 163.416218][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.423452][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.431884][ T8184] bridge_slave_1: entered allmulticast mode [ 163.439837][ T8184] bridge_slave_1: entered promiscuous mode [ 163.503682][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.521039][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.568655][ T8184] team0: Port device team_slave_0 added [ 163.596420][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.615984][ T8184] team0: Port device team_slave_1 added [ 163.666219][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.681824][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.689747][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.716505][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.730180][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.737622][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.763980][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.807948][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.855886][ T8184] hsr_slave_0: entered promiscuous mode [ 163.862443][ T8184] hsr_slave_1: entered promiscuous mode [ 163.870101][ T8184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.878105][ T8184] Cannot create hsr debugfs directory [ 164.007766][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.111694][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 164.202088][ T8292] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 164.210075][ T8292] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.691'. [ 164.219892][ T8292] nbd: must specify a device to reconfigure [ 164.593849][ T13] bridge_slave_1: left allmulticast mode [ 164.604989][ T13] bridge_slave_1: left promiscuous mode [ 164.612110][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.646585][ T13] bridge_slave_0: left allmulticast mode [ 164.652347][ T13] bridge_slave_0: left promiscuous mode [ 164.678736][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.693151][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.703282][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.713241][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.722475][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.731743][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.819787][ T8313] netlink: 'syz.3.698': attribute type 21 has an invalid length. [ 164.932716][ T8320] openvswitch: netlink: Key type 12294 is out of range max 32 [ 165.276978][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.290814][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.301081][ T13] bond0 (unregistering): Released all slaves [ 165.336813][ T8313] netlink: 'syz.3.698': attribute type 6 has an invalid length. [ 165.344518][ T8313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.698'. [ 165.468988][ T5847] Bluetooth: hci2: command tx timeout [ 166.020560][ T13] hsr_slave_0: left promiscuous mode [ 166.045306][ T13] hsr_slave_1: left promiscuous mode [ 166.056607][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.064088][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.078387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.095308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.131316][ T13] veth1_macvtap: left promiscuous mode [ 166.137265][ T13] veth0_macvtap: left promiscuous mode [ 166.142970][ T13] veth1_vlan: left promiscuous mode [ 166.154036][ T13] veth0_vlan: left promiscuous mode [ 166.162107][ T8358] netlink: 'syz.1.711': attribute type 21 has an invalid length. [ 166.173015][ T8358] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.181892][ T8358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.189187][ T8358] IPv6: NLM_F_CREATE should be set when creating new route [ 166.196517][ T8358] IPv6: NLM_F_CREATE should be set when creating new route [ 166.203781][ T8358] IPv6: NLM_F_CREATE should be set when creating new route [ 166.752407][ T13] team0 (unregistering): Port device team_slave_1 removed [ 166.798058][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.825298][ T5847] Bluetooth: hci0: command tx timeout [ 167.198888][ T8352] __nla_validate_parse: 3 callbacks suppressed [ 167.198911][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 167.214721][ T8352] netlink: 92 bytes leftover after parsing attributes in process `syz.2.710'. [ 167.289261][ T8308] chnl_net:caif_netlink_parms(): no params data found [ 167.379769][ T8184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.486252][ T8184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.506926][ T8184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.518781][ T8376] tipc: Started in network mode [ 167.523896][ T8376] tipc: Node identity 4, cluster identity 4711 [ 167.537982][ T8376] tipc: Node number set to 4 [ 167.544981][ T5847] Bluetooth: hci2: command tx timeout [ 167.605912][ T8184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.770524][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.784233][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.798085][ T8308] bridge_slave_0: entered allmulticast mode [ 167.806262][ T8308] bridge_slave_0: entered promiscuous mode [ 167.823667][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.842653][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.861454][ T8308] bridge_slave_1: entered allmulticast mode [ 167.870425][ T8308] bridge_slave_1: entered promiscuous mode [ 168.019847][ T8308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.063595][ T8308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.196664][ T8308] team0: Port device team_slave_0 added [ 168.231734][ T8308] team0: Port device team_slave_1 added [ 168.320209][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.335812][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.368099][ T8308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.408758][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.418089][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.447161][ T8308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.482840][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 168.582072][ T8308] hsr_slave_0: entered promiscuous mode [ 168.599746][ T8308] hsr_slave_1: entered promiscuous mode [ 168.608715][ T8308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.616903][ T8308] Cannot create hsr debugfs directory [ 168.771121][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.905534][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 168.915149][ T5847] Bluetooth: hci0: command tx timeout [ 168.948255][ T8430] bridge_slave_1: left allmulticast mode [ 168.954009][ T8430] bridge_slave_1: left promiscuous mode [ 168.960702][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.001783][ T8430] bridge_slave_0: left allmulticast mode [ 169.007941][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.120566][ T8184] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.182543][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.189881][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.210597][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.217913][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.254182][ T8443] netlink: 'syz.1.735': attribute type 7 has an invalid length. [ 169.349926][ T8184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.465791][ T8454] delete_channel: no stack [ 169.674018][ T8308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.729706][ T8308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.776215][ T8308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.819367][ T8308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.860273][ T8469] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.965805][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.099078][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.133348][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.162831][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.170125][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.194135][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 170.202206][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.208800][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 170.210274][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.618007][ T8184] veth0_vlan: entered promiscuous mode [ 170.647701][ T8184] veth1_vlan: entered promiscuous mode [ 170.700563][ T8503] netlink: 'syz.2.747': attribute type 11 has an invalid length. [ 170.709254][ T8503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.747'. [ 170.724095][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.739318][ T8503] netlink: 'syz.2.747': attribute type 11 has an invalid length. [ 170.761124][ T8503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.747'. [ 170.784037][ T8184] veth0_macvtap: entered promiscuous mode [ 170.826235][ T8184] veth1_macvtap: entered promiscuous mode [ 170.910555][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.944222][ T8308] veth0_vlan: entered promiscuous mode [ 170.957851][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.985349][ T5847] Bluetooth: hci0: command tx timeout [ 171.010769][ T8184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.031176][ T8184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.049873][ T8184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.060455][ T8184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.101635][ T8308] veth1_vlan: entered promiscuous mode [ 171.148906][ T8517] tipc: Enabled bearer , priority 10 [ 171.354750][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 171.356251][ T8524] netlink: 236 bytes leftover after parsing attributes in process `syz.1.753'. [ 171.398199][ T8523] bridge0: port 3(vlan4) entered blocking state [ 171.409394][ T8523] bridge0: port 3(vlan4) entered disabled state [ 171.416269][ T8523] vlan4: entered allmulticast mode [ 171.421767][ T8523] bridge0: entered allmulticast mode [ 171.434691][ T8523] vlan4: left allmulticast mode [ 171.441844][ T8523] bridge0: left allmulticast mode [ 171.467318][ T8308] veth0_macvtap: entered promiscuous mode [ 171.483698][ T6462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.500711][ T6462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.522112][ T8308] veth1_macvtap: entered promiscuous mode [ 171.624781][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.633898][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.700104][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.737797][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.842985][ T8308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.868269][ T8308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.889374][ T8308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.911860][ T8308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.170022][ T8538] delete_channel: no stack [ 172.186798][ T8538] unsupported nla_type 52263 [ 172.265959][ T7419] tipc: Node number set to 504128273 [ 172.278603][ T1009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.470283][ T1009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.609812][ T1009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.697657][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.734943][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.749564][ T1009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.935308][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.963973][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.076350][ T5847] Bluetooth: hci0: command tx timeout [ 173.222859][ T8547] __nla_validate_parse: 2 callbacks suppressed [ 173.222881][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 173.284587][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.315333][ T1009] bridge_slave_1: left allmulticast mode [ 173.321087][ T1009] bridge_slave_1: left promiscuous mode [ 173.327603][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.338897][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.349654][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.358039][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.368362][ T8552] sctp: [Deprecated]: syz.2.762 (pid 8552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.368362][ T8552] Use struct sctp_sack_info instead [ 173.390551][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.428757][ T8552] sctp: [Deprecated]: syz.2.762 (pid 8552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.428757][ T8552] Use struct sctp_sack_info instead [ 173.454668][ T1009] bridge_slave_0: left allmulticast mode [ 173.474927][ T1009] bridge_slave_0: left promiscuous mode [ 173.483546][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.534235][ T8558] netlink: 51 bytes leftover after parsing attributes in process `syz.3.763'. [ 173.845826][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.859340][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.871075][ T1009] bond0 (unregistering): Released all slaves [ 174.158251][ T8561] netlink: 348 bytes leftover after parsing attributes in process `syz.1.765'. [ 174.714759][ T1009] hsr_slave_0: left promiscuous mode [ 174.721078][ T1009] hsr_slave_1: left promiscuous mode [ 174.733086][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.741659][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.766381][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.773836][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.803136][ T1009] veth1_macvtap: left promiscuous mode [ 174.811223][ T1009] veth0_macvtap: left promiscuous mode [ 174.819096][ T1009] veth1_vlan: left promiscuous mode [ 174.824466][ T1009] veth0_vlan: left promiscuous mode [ 175.471556][ T5842] Bluetooth: hci2: command tx timeout [ 175.859296][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.869201][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.877489][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.887216][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.895400][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.083503][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 176.140989][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 176.828891][ T8548] chnl_net:caif_netlink_parms(): no params data found [ 177.055948][ T8617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.779'. [ 177.163416][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.175596][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.182945][ T8548] bridge_slave_0: entered allmulticast mode [ 177.191121][ T8548] bridge_slave_0: entered promiscuous mode [ 177.231328][ T8548] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.246134][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.263769][ T8548] bridge_slave_1: entered allmulticast mode [ 177.277637][ T8548] bridge_slave_1: entered promiscuous mode [ 177.381819][ T8631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.782'. [ 177.479183][ T8548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.511153][ T8548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.550803][ T5847] Bluetooth: hci2: command tx timeout [ 177.642815][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.682465][ T8591] chnl_net:caif_netlink_parms(): no params data found [ 177.691873][ T8642] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 177.727871][ T8548] team0: Port device team_slave_0 added [ 177.816814][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.843629][ T8548] team0: Port device team_slave_1 added [ 177.843757][ T8644] netlink: 'syz.1.787': attribute type 2 has an invalid length. [ 177.857588][ T8644] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.787'. [ 177.867774][ T8644] nbd: must specify a device to reconfigure [ 177.927515][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.945140][ T5847] Bluetooth: hci0: command tx timeout [ 177.991593][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.002269][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.029541][ T8548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.043502][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.050653][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.078266][ T8548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.118918][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.208320][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.224183][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.232105][ T8591] bridge_slave_0: entered allmulticast mode [ 178.241619][ T8591] bridge_slave_0: entered promiscuous mode [ 178.268917][ T8652] netem: change failed [ 178.274304][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.288884][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.300753][ T8591] bridge_slave_1: entered allmulticast mode [ 178.309084][ T8591] bridge_slave_1: entered promiscuous mode [ 178.388771][ T8548] hsr_slave_0: entered promiscuous mode [ 178.401438][ T8548] hsr_slave_1: entered promiscuous mode [ 178.408852][ T8548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.417110][ T8548] Cannot create hsr debugfs directory [ 178.522658][ T8591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.577612][ T8591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.823680][ T8591] team0: Port device team_slave_0 added [ 178.837497][ T8661] IPVS: fo: UDP 224.0.0.2:20004 - no destination available [ 178.839409][ T1009] bridge_slave_1: left allmulticast mode [ 178.844973][ T7432] IPVS: starting estimator thread 0... [ 178.858327][ T1009] bridge_slave_1: left promiscuous mode [ 178.865184][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.888419][ T1009] bridge_slave_0: left allmulticast mode [ 178.902430][ T1009] bridge_slave_0: left promiscuous mode [ 178.911076][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.966373][ T8666] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.007078][ T8669] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 179.401882][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.414051][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.424569][ T1009] bond0 (unregistering): Released all slaves [ 179.554452][ T8591] team0: Port device team_slave_1 added [ 179.625275][ T5847] Bluetooth: hci2: command tx timeout [ 179.683582][ T8683] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 179.979780][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.989987][ T8701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.804'. [ 180.009478][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.036682][ T5847] Bluetooth: hci0: command tx timeout [ 180.042413][ T8591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.056604][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.063606][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.090069][ T8591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.219385][ T8695] syz.2.802 (8695) used greatest stack depth: 17992 bytes left [ 180.341885][ T8707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 180.408121][ T1009] hsr_slave_0: left promiscuous mode [ 180.418374][ T1009] hsr_slave_1: left promiscuous mode [ 180.424390][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.442722][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.451823][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.459475][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.482961][ T1009] veth1_macvtap: left promiscuous mode [ 180.485172][ T8716] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.808'. [ 180.489867][ T1009] veth0_macvtap: left promiscuous mode [ 180.509139][ T1009] veth1_vlan: left promiscuous mode [ 180.510370][ T8716] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.808'. [ 180.514575][ T1009] veth0_vlan: left promiscuous mode [ 180.974297][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 181.021882][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 181.481412][ T8591] hsr_slave_0: entered promiscuous mode [ 181.496288][ T8591] hsr_slave_1: entered promiscuous mode [ 181.502853][ T8591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.526033][ T8591] Cannot create hsr debugfs directory [ 181.715334][ T5847] Bluetooth: hci2: command tx timeout [ 181.961764][ T8737] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.813'. [ 182.115457][ T5847] Bluetooth: hci0: command tx timeout [ 182.155777][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 182.382479][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 182.451931][ T8548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.479600][ T8548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.503915][ T8548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.529135][ T8548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.717334][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 182.731748][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 182.814340][ T8548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.879491][ T8548] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.913247][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.920564][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.946497][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.953823][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.013428][ T8591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.040092][ T8591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.056681][ T8591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.087446][ T8591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.456696][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.515278][ T8591] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.556705][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.563947][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.633617][ T8803] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.663131][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.670410][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.682958][ T8804] tipc: Failed to remove unknown binding: 66,1,1/4:732560659/732560662 [ 183.720833][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 183.750848][ T8548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.890783][ T8591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.187158][ T5847] Bluetooth: hci0: command tx timeout [ 184.430172][ T8548] veth0_vlan: entered promiscuous mode [ 184.482221][ T8548] veth1_vlan: entered promiscuous mode [ 184.559330][ T8591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.576501][ T8548] veth0_macvtap: entered promiscuous mode [ 184.590422][ T8548] veth1_macvtap: entered promiscuous mode [ 184.637648][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.668634][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.713167][ T8548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.723878][ T8548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.733683][ T8548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.743073][ T8548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.783210][ T8591] veth0_vlan: entered promiscuous mode [ 184.851988][ T8591] veth1_vlan: entered promiscuous mode [ 184.958622][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.966936][ T8591] veth0_macvtap: entered promiscuous mode [ 184.986187][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.042288][ T8591] veth1_macvtap: entered promiscuous mode [ 185.127969][ T8853] batadv0: Device is already in use. [ 185.127998][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.138045][ T8854] __nla_validate_parse: 4 callbacks suppressed [ 185.138069][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 185.188286][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.201196][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.241949][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.281533][ T8591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.296645][ T8591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.307249][ T8591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.318666][ T8591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.489808][ T8861] C: renamed from lo (while UP) [ 185.897019][ T6462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.921832][ T6462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.003105][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.153066][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.178945][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.218123][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.402476][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.412325][ T8888] netlink: 'syz.2.857': attribute type 11 has an invalid length. [ 186.460179][ T8893] xt_ecn: cannot match TCP bits for non-tcp packets [ 186.461449][ T8888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.857'. [ 186.641677][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.026398][ T36] bridge_slave_1: left allmulticast mode [ 187.032159][ T36] bridge_slave_1: left promiscuous mode [ 187.059275][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.098397][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.107512][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.122170][ T36] bridge_slave_0: left allmulticast mode [ 187.129432][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.136881][ T36] bridge_slave_0: left promiscuous mode [ 187.143865][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.154129][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.166143][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.668487][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.681088][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.691553][ T36] bond0 (unregistering): Released all slaves [ 188.226111][ T8931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.865'. [ 188.236467][ T36] hsr_slave_0: left promiscuous mode [ 188.285549][ T36] hsr_slave_1: left promiscuous mode [ 188.291868][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.337775][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.364656][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.385037][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.442854][ T36] veth1_macvtap: left promiscuous mode [ 188.443717][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 188.464183][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.477213][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.487425][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.496649][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.505723][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.522387][ T36] veth0_macvtap: left promiscuous mode [ 188.530775][ T36] veth1_vlan: left promiscuous mode [ 188.536333][ T36] veth0_vlan: left promiscuous mode [ 189.083928][ T36] team0 (unregistering): Port device team_slave_1 removed [ 189.139627][ T36] team0 (unregistering): Port device team_slave_0 removed [ 189.228754][ T5847] Bluetooth: hci0: command tx timeout [ 189.567320][ T8925] syzkaller1: entered promiscuous mode [ 189.572891][ T8925] syzkaller1: entered allmulticast mode [ 189.590271][ T8917] chnl_net:caif_netlink_parms(): no params data found [ 189.604379][ T8947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.710612][ T8950] netlink: 64 bytes leftover after parsing attributes in process `syz.3.872'. [ 189.804766][ T8953] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.814777][ T8953] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.821421][ T8952] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 189.825751][ T8953] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.841358][ T8953] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.871509][ T8952] netlink: 'syz.2.873': attribute type 3 has an invalid length. [ 189.886571][ T8952] netlink: 224 bytes leftover after parsing attributes in process `syz.2.873'. [ 189.898509][ T8952] NCSI netlink: No device for ifindex 0 [ 190.053599][ T8963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.060944][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 190.068292][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 190.075600][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 190.140329][ T8970] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 190.157956][ T8971] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 190.201528][ T8963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.211658][ T8964] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 190.270754][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.289350][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.298549][ T8917] bridge_slave_0: entered allmulticast mode [ 190.307409][ T8917] bridge_slave_0: entered promiscuous mode [ 190.318158][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.326842][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.334376][ T8917] bridge_slave_1: entered allmulticast mode [ 190.347154][ T8917] bridge_slave_1: entered promiscuous mode [ 190.592954][ T5847] Bluetooth: hci2: command tx timeout [ 190.623053][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.665996][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.807121][ T8917] team0: Port device team_slave_0 added [ 190.827939][ T8998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.837412][ T8998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.849718][ T8998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.858829][ T8998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 190.868456][ T8998] geneve2: entered promiscuous mode [ 190.874733][ T8998] geneve2: entered allmulticast mode [ 190.891445][ T8917] team0: Port device team_slave_1 added [ 190.952246][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.067372][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.074395][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.103465][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.136548][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.181219][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.188545][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.226095][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.268386][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.315461][ T5847] Bluetooth: hci0: command tx timeout [ 191.391298][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.529514][ T8917] hsr_slave_0: entered promiscuous mode [ 191.538288][ T8917] hsr_slave_1: entered promiscuous mode [ 191.544646][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.553272][ T8917] Cannot create hsr debugfs directory [ 191.556046][ T9023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.890'. [ 191.587269][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 191.737061][ T9031] netlink: 232 bytes leftover after parsing attributes in process `syz.3.892'. [ 192.048808][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 192.072282][ T9047] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.896'. [ 192.086424][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.093778][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.110439][ T8940] bridge_slave_0: entered allmulticast mode [ 192.129101][ T8940] bridge_slave_0: entered promiscuous mode [ 192.151599][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.166694][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.191755][ T8940] bridge_slave_1: entered allmulticast mode [ 192.200102][ T8940] bridge_slave_1: entered promiscuous mode [ 192.671865][ T5847] Bluetooth: hci2: command tx timeout [ 192.707448][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.728916][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.767217][ T36] bridge_slave_1: left allmulticast mode [ 192.772927][ T36] bridge_slave_1: left promiscuous mode [ 192.784344][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.797219][ T36] bridge_slave_0: left allmulticast mode [ 192.802935][ T36] bridge_slave_0: left promiscuous mode [ 192.808977][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.270799][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.283072][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.294072][ T36] bond0 (unregistering): Released all slaves [ 193.398857][ T5847] Bluetooth: hci0: command tx timeout [ 193.427659][ T8940] team0: Port device team_slave_0 added [ 193.497456][ T9081] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 193.505305][ T9081] netlink: 144 bytes leftover after parsing attributes in process `syz.2.905'. [ 193.573875][ T8940] team0: Port device team_slave_1 added [ 193.575514][ T9081] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 193.600713][ T9081] netlink: 'syz.2.905': attribute type 2 has an invalid length. [ 193.613526][ T9081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.905'. [ 193.851640][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.876168][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.885452][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 193.932038][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.955133][ T9094] bridge0: port 1(gretap0) entered blocking state [ 193.962125][ T9094] bridge0: port 1(gretap0) entered disabled state [ 193.971420][ T9094] gretap0: entered allmulticast mode [ 193.986026][ T9094] gretap0: entered promiscuous mode [ 194.028518][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.035775][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.071280][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.099334][ T36] hsr_slave_0: left promiscuous mode [ 194.117597][ T36] hsr_slave_1: left promiscuous mode [ 194.124228][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.133394][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.143224][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.151821][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.178528][ T36] veth1_macvtap: left promiscuous mode [ 194.184257][ T36] veth0_macvtap: left promiscuous mode [ 194.190280][ T36] veth1_vlan: left promiscuous mode [ 194.196347][ T36] veth0_vlan: left promiscuous mode [ 194.750242][ T5847] Bluetooth: hci2: command tx timeout [ 194.771925][ T36] team0 (unregistering): Port device team_slave_1 removed [ 194.820169][ T36] team0 (unregistering): Port device team_slave_0 removed [ 195.466165][ T5847] Bluetooth: hci0: command tx timeout [ 195.471511][ T9110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.913'. [ 195.495453][ T8940] hsr_slave_0: entered promiscuous mode [ 195.509751][ T8940] hsr_slave_1: entered promiscuous mode [ 195.529152][ T8940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.538848][ T8940] Cannot create hsr debugfs directory [ 195.938100][ T8917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.973633][ T8917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.014695][ T8917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.056420][ T8917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.201653][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 196.329230][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.421447][ T8917] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.437590][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.444799][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.462657][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.469948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.635712][ T9149] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.667220][ T8940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.686672][ T8917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.707550][ T8940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.726503][ T9149] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.742026][ T8940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.772458][ T8940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.813902][ T9149] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.828235][ T5847] Bluetooth: hci2: command tx timeout [ 196.910735][ T9149] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.032060][ T9149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.052042][ T9149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.072720][ T9149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.093411][ T9149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.269581][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.298776][ T9174] FAULT_INJECTION: forcing a failure. [ 197.298776][ T9174] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 197.369623][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.378325][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.2.929 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 197.378355][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.378416][ T9174] Call Trace: [ 197.378447][ T9174] [ 197.378461][ T9174] dump_stack_lvl+0x189/0x250 [ 197.378565][ T9174] ? __pfx____ratelimit+0x10/0x10 [ 197.378603][ T9174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.378632][ T9174] ? __pfx__printk+0x10/0x10 [ 197.378653][ T9174] ? __might_fault+0xb0/0x130 [ 197.378686][ T9174] should_fail_ex+0x414/0x560 [ 197.378723][ T9174] _copy_from_user+0x2d/0xb0 [ 197.378744][ T9174] ___sys_recvmsg+0x12e/0x510 [ 197.378781][ T9174] ? __pfx____sys_recvmsg+0x10/0x10 [ 197.378851][ T9174] ? __fget_files+0x3a0/0x420 [ 197.378887][ T9174] do_recvmmsg+0x307/0x770 [ 197.378924][ T9174] ? __pfx_do_recvmmsg+0x10/0x10 [ 197.378962][ T9174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.379014][ T9174] __x64_sys_recvmmsg+0x190/0x240 [ 197.379044][ T9174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 197.379069][ T9174] ? rcu_is_watching+0x15/0xb0 [ 197.379109][ T9174] ? do_syscall_64+0xbe/0x3b0 [ 197.379135][ T9174] do_syscall_64+0xfa/0x3b0 [ 197.379152][ T9174] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.379181][ T9174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.379203][ T9174] ? clear_bhb_loop+0x60/0xb0 [ 197.379227][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.379267][ T9174] RIP: 0033:0x7f596338e929 [ 197.379295][ T9174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.379316][ T9174] RSP: 002b:00007f59642d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 197.379348][ T9174] RAX: ffffffffffffffda RBX: 00007f59635b5fa0 RCX: 00007f596338e929 [ 197.379363][ T9174] RDX: 0000000000000001 RSI: 000020000000dec0 RDI: 0000000000000004 [ 197.379376][ T9174] RBP: 00007f59642d0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.379388][ T9174] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 197.379400][ T9174] R13: 0000000000000000 R14: 00007f59635b5fa0 R15: 00007fffaa78ee08 [ 197.379433][ T9174] [ 197.722755][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.730061][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.779979][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.787257][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.843725][ T8940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.855243][ T9189] netlink: 'syz.1.935': attribute type 11 has an invalid length. [ 197.863038][ T9189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.935'. [ 197.875260][ T8940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.920634][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.929933][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 198.371527][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.482540][ T8940] veth0_vlan: entered promiscuous mode [ 198.515923][ T8940] veth1_vlan: entered promiscuous mode [ 198.584027][ T8940] veth0_macvtap: entered promiscuous mode [ 198.603316][ T8940] veth1_macvtap: entered promiscuous mode [ 198.647523][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.683285][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.712825][ T8940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.728718][ T8940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.741094][ T8940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.754154][ T8940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.083844][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.108450][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.196969][ T6462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.223974][ T6462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.316175][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 199.437454][ T9227] batadv_slave_1: entered promiscuous mode [ 199.459520][ T9087] ------------[ cut here ]------------ [ 199.465710][ T9087] refcount_t: underflow; use-after-free. [ 199.472230][ T9087] WARNING: CPU: 1 PID: 9087 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 199.482174][ T9087] Modules linked in: [ 199.486709][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 199.499083][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.509319][ T9087] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 199.515580][ T9087] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 e7 96 c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 c4 96 c9 0a 01 90 48 c7 c7 [ 199.535225][ T9087] RSP: 0018:ffffc900033a76a0 EFLAGS: 00010246 [ 199.541299][ T9087] RAX: 26390cdcf70e7c00 RBX: 0000000000000003 RCX: ffff88802968bc00 [ 199.549555][ T9087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 199.557573][ T9087] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 199.565670][ T9087] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 199.573645][ T9087] R13: ffff88802ff2b860 R14: ffff88802ff2b878 R15: ffffffff85f65610 [ 199.582076][ T9087] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 199.591318][ T9087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.597945][ T9087] CR2: 00007fd700a8cd58 CR3: 0000000072a78000 CR4: 00000000003526f0 [ 199.605944][ T9087] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.613916][ T9087] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.621933][ T9087] Call Trace: [ 199.625341][ T9087] [ 199.628282][ T9087] klist_dec_and_del+0x3c7/0x3d0 [ 199.633228][ T9087] ? __pfx_klist_children_put+0x10/0x10 [ 199.638818][ T9087] klist_del+0xa6/0x110 [ 199.642995][ T9087] device_del+0x280/0x8e0 [ 199.647395][ T9087] ? _raw_spin_unlock_irq+0x2e/0x50 [ 199.652612][ T9087] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 199.658718][ T9087] ? __pfx_device_del+0x10/0x10 [ 199.663580][ T9087] ? netdev_unregister_kobject+0x344/0x450 [ 199.669431][ T9087] unregister_netdevice_many_notify+0x1d52/0x2320 [ 199.675934][ T9087] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 199.683213][ T9087] ? rcu_is_watching+0x15/0xb0 [ 199.688320][ T9087] ? __mutex_lock+0xa6d/0xe80 [ 199.693006][ T9087] ? __lock_acquire+0xab9/0xd20 [ 199.697905][ T9087] ? __mutex_lock+0x51b/0xe80 [ 199.702631][ T9087] unregister_netdevice_queue+0x33c/0x380 [ 199.708786][ T9087] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 199.715067][ T9087] ? rtnl_net_dev_lock+0x36/0x2f0 [ 199.720098][ T9087] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 199.725324][ T9087] unregister_netdev+0x1f/0x60 [ 199.730129][ T9087] bnep_session+0x294d/0x2b40 [ 199.734935][ T9087] ? trace_sched_exit_tp+0x38/0x120 [ 199.740167][ T9087] ? __lock_acquire+0xab9/0xd20 [ 199.745153][ T9087] ? __pfx_bnep_session+0x10/0x10 [ 199.750212][ T9087] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 199.756169][ T9087] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.762528][ T9087] ? __pfx_woken_wake_function+0x10/0x10 [ 199.768204][ T9087] ? __kthread_parkme+0x7b/0x200 [ 199.773148][ T9087] ? __kthread_parkme+0x1a1/0x200 [ 199.778199][ T9087] kthread+0x70e/0x8a0 [ 199.782720][ T9087] ? __pfx_bnep_session+0x10/0x10 [ 199.788674][ T9087] ? __pfx_kthread+0x10/0x10 [ 199.793287][ T9087] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.798628][ T9087] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.803840][ T9087] ? __pfx_kthread+0x10/0x10 [ 199.808490][ T9087] ret_from_fork+0x3f9/0x770 [ 199.813099][ T9087] ? __pfx_ret_from_fork+0x10/0x10 [ 199.818271][ T9087] ? __switch_to_asm+0x39/0x70 [ 199.823038][ T9087] ? __switch_to_asm+0x33/0x70 [ 199.827843][ T9087] ? __pfx_kthread+0x10/0x10 [ 199.832440][ T9087] ret_from_fork_asm+0x1a/0x30 [ 199.837276][ T9087] [ 199.840368][ T9087] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.847652][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 199.859799][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.869869][ T9087] Call Trace: [ 199.873157][ T9087] [ 199.876101][ T9087] dump_stack_lvl+0x99/0x250 [ 199.880714][ T9087] ? __asan_memcpy+0x40/0x70 [ 199.885319][ T9087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.890525][ T9087] ? __pfx__printk+0x10/0x10 [ 199.895189][ T9087] panic+0x2db/0x790 [ 199.899097][ T9087] ? __pfx_panic+0x10/0x10 [ 199.903515][ T9087] ? show_trace_log_lvl+0x4fb/0x550 [ 199.908721][ T9087] ? ret_from_fork_asm+0x1a/0x30 [ 199.913707][ T9087] __warn+0x31b/0x4b0 [ 199.917687][ T9087] ? refcount_warn_saturate+0x11a/0x1d0 [ 199.923239][ T9087] ? refcount_warn_saturate+0x11a/0x1d0 [ 199.928784][ T9087] report_bug+0x2be/0x4f0 [ 199.933137][ T9087] ? refcount_warn_saturate+0x11a/0x1d0 [ 199.938683][ T9087] ? refcount_warn_saturate+0x11a/0x1d0 [ 199.944236][ T9087] ? refcount_warn_saturate+0x11c/0x1d0 [ 199.949782][ T9087] handle_bug+0x84/0x160 [ 199.954021][ T9087] exc_invalid_op+0x1a/0x50 [ 199.958536][ T9087] asm_exc_invalid_op+0x1a/0x20 [ 199.963388][ T9087] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 199.969539][ T9087] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 e7 96 c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 c4 96 c9 0a 01 90 48 c7 c7 [ 199.989153][ T9087] RSP: 0018:ffffc900033a76a0 EFLAGS: 00010246 [ 199.995217][ T9087] RAX: 26390cdcf70e7c00 RBX: 0000000000000003 RCX: ffff88802968bc00 [ 200.003200][ T9087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 200.011174][ T9087] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 200.019141][ T9087] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 200.027124][ T9087] R13: ffff88802ff2b860 R14: ffff88802ff2b878 R15: ffffffff85f65610 [ 200.035133][ T9087] ? __pfx_klist_children_put+0x10/0x10 [ 200.040705][ T9087] klist_dec_and_del+0x3c7/0x3d0 [ 200.045648][ T9087] ? __pfx_klist_children_put+0x10/0x10 [ 200.051198][ T9087] klist_del+0xa6/0x110 [ 200.055366][ T9087] device_del+0x280/0x8e0 [ 200.059720][ T9087] ? _raw_spin_unlock_irq+0x2e/0x50 [ 200.064931][ T9087] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 200.071000][ T9087] ? __pfx_device_del+0x10/0x10 [ 200.075847][ T9087] ? netdev_unregister_kobject+0x344/0x450 [ 200.081666][ T9087] unregister_netdevice_many_notify+0x1d52/0x2320 [ 200.088103][ T9087] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 200.094872][ T9087] ? rcu_is_watching+0x15/0xb0 [ 200.099647][ T9087] ? __mutex_lock+0xa6d/0xe80 [ 200.104332][ T9087] ? __lock_acquire+0xab9/0xd20 [ 200.109185][ T9087] ? __mutex_lock+0x51b/0xe80 [ 200.113880][ T9087] unregister_netdevice_queue+0x33c/0x380 [ 200.119621][ T9087] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 200.125908][ T9087] ? rtnl_net_dev_lock+0x36/0x2f0 [ 200.130964][ T9087] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 200.136092][ T9087] unregister_netdev+0x1f/0x60 [ 200.140869][ T9087] bnep_session+0x294d/0x2b40 [ 200.145609][ T9087] ? trace_sched_exit_tp+0x38/0x120 [ 200.150842][ T9087] ? __lock_acquire+0xab9/0xd20 [ 200.155750][ T9087] ? __pfx_bnep_session+0x10/0x10 [ 200.160814][ T9087] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 200.166722][ T9087] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.173059][ T9087] ? __pfx_woken_wake_function+0x10/0x10 [ 200.178697][ T9087] ? __kthread_parkme+0x7b/0x200 [ 200.183636][ T9087] ? __kthread_parkme+0x1a1/0x200 [ 200.188682][ T9087] kthread+0x70e/0x8a0 [ 200.192781][ T9087] ? __pfx_bnep_session+0x10/0x10 [ 200.197820][ T9087] ? __pfx_kthread+0x10/0x10 [ 200.202418][ T9087] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.207645][ T9087] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.212859][ T9087] ? __pfx_kthread+0x10/0x10 [ 200.217484][ T9087] ret_from_fork+0x3f9/0x770 [ 200.222091][ T9087] ? __pfx_ret_from_fork+0x10/0x10 [ 200.227218][ T9087] ? __switch_to_asm+0x39/0x70 [ 200.231987][ T9087] ? __switch_to_asm+0x33/0x70 [ 200.236752][ T9087] ? __pfx_kthread+0x10/0x10 [ 200.241342][ T9087] ret_from_fork_asm+0x1a/0x30 [ 200.246130][ T9087] [ 201.400970][ T9087] Shutting down cpus with NMI [ 201.406363][ T9087] Kernel Offset: disabled [ 201.410735][ T9087] Rebooting in 86400 seconds..