last executing test programs: 32.06875279s ago: executing program 4 (id=164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x1, 0x3503, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 31.920798756s ago: executing program 4 (id=169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=""/102}, 0x20) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)={0x28, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4049004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x3e, 0x0, 0x48, @rand_addr=' \x01\x00', @private1, 0x8000, 0x7800, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r9, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6d23354e67e25db5}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x44010) r11 = socket(0x28, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r11, 0x28, 0x8, 0x0, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 31.708935712s ago: executing program 4 (id=173): r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 24.316158043s ago: executing program 4 (id=173): r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000300000000000000000000000000000000000000000000ffffffff0000000000000000b7650000065f18a00f8be51d4b0bc4a16dfc00007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc68706464700100000000000000000000e318716c30000000f5ff00000000eddcaaaaaaaaaa00ffffff165e6e0000ffffffff000200000000000070000000f0000000280100003830325f3300000000000000003f000000000000000000000000000000bf0600080000000000000000000180004000006e6661634f6c00000000fbfaffffffffffffff0000000000000000bbf9000000280000000000000073797a3100006de00aa91eb21ad80000fa00050000000000000000000000000000000000000300006d61fe6b00000000000000000000000019bf3efa54c2da8100ff0100000000000000000000a1fa19a6ffffffff000000000000000000000000000000660500000000000000000000000000000000000000001802000000c27b6a760001000000ffffffff00000000"]}, 0x230) 15.306101342s ago: executing program 4 (id=173): r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 6.670338719s ago: executing program 4 (id=173): r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 1.392424679s ago: executing program 1 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700500000000000800207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 1.19294588s ago: executing program 1 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1.049268688s ago: executing program 2 (id=564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 1.014074451s ago: executing program 1 (id=566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r2) 954.167129ms ago: executing program 2 (id=568): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 821.914623ms ago: executing program 0 (id=569): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400f4be5b9289a04e4f00000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001a80100005"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 821.61498ms ago: executing program 3 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x8, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x4, '.\x00'}}}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x38}}, 0x0) 814.500316ms ago: executing program 1 (id=571): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 797.211403ms ago: executing program 2 (id=572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000a40)="c03601e08ce091c1cb9b6c870b5712c18dcf", 0x12}, {0x0}], 0x2) 636.289252ms ago: executing program 3 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local={0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x6c8c, 0x0, 0x0, 0x0, 0x42}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 635.801952ms ago: executing program 0 (id=574): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, 0xffffffffffffffff, 0x4, r0}, 0x10) 608.633451ms ago: executing program 3 (id=575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) 475.933855ms ago: executing program 3 (id=576): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 475.429876ms ago: executing program 1 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) close(r0) socket$netlink(0x10, 0x3, 0xb) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) 332.972741ms ago: executing program 0 (id=578): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) 332.574033ms ago: executing program 2 (id=579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) 295.054385ms ago: executing program 3 (id=580): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) 263.945702ms ago: executing program 0 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000008004500001c00c31d000032907800000000ffffffff0f089078020f0778"], 0x0) 192.506953ms ago: executing program 2 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) 168.085066ms ago: executing program 2 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 118.636465ms ago: executing program 0 (id=584): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)={0x14, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 4.733852ms ago: executing program 0 (id=585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r2) 4.181599ms ago: executing program 3 (id=586): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b2704582", 0xc3}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb97", 0x88}], 0x2}}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002280)="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", 0x513}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000b40)=0x1, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded897", 0x19, 0x11, 0x0, 0x0) 0s ago: executing program 1 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 56.813972][ T5823] cgroup: Unknown subsys name 'net' [ 56.939102][ T5823] cgroup: Unknown subsys name 'cpuset' [ 56.947879][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.250632][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.214264][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.223125][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.253592][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.263925][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.272131][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.276639][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.279287][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.287827][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.294697][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.301514][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.309603][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.318036][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.324549][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.331853][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.337467][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.343939][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.351520][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.359358][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.366505][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.371808][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.378636][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.386692][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.393781][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.400182][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.407650][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.414348][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.420832][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.441238][ T5855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.450428][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.461881][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.773899][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 62.932546][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 62.951011][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 63.021864][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 63.031989][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 63.076063][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.083788][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.091339][ T5833] bridge_slave_0: entered allmulticast mode [ 63.098414][ T5833] bridge_slave_0: entered promiscuous mode [ 63.164504][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.171984][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.179273][ T5833] bridge_slave_1: entered allmulticast mode [ 63.186638][ T5833] bridge_slave_1: entered promiscuous mode [ 63.221111][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.228373][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.235852][ T5834] bridge_slave_0: entered allmulticast mode [ 63.242535][ T5834] bridge_slave_0: entered promiscuous mode [ 63.270078][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.280274][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.287599][ T5834] bridge_slave_1: entered allmulticast mode [ 63.294303][ T5834] bridge_slave_1: entered promiscuous mode [ 63.343217][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.350611][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.358256][ T5842] bridge_slave_0: entered allmulticast mode [ 63.364834][ T5842] bridge_slave_0: entered promiscuous mode [ 63.372731][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.380288][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.388015][ T5842] bridge_slave_1: entered allmulticast mode [ 63.394637][ T5842] bridge_slave_1: entered promiscuous mode [ 63.404906][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.417571][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.483246][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.490526][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.498569][ T5835] bridge_slave_0: entered allmulticast mode [ 63.505154][ T5835] bridge_slave_0: entered promiscuous mode [ 63.513516][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.520794][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.528023][ T5835] bridge_slave_1: entered allmulticast mode [ 63.534667][ T5835] bridge_slave_1: entered promiscuous mode [ 63.543022][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.572001][ T5833] team0: Port device team_slave_0 added [ 63.588996][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.608367][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.619635][ T5833] team0: Port device team_slave_1 added [ 63.630849][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.641370][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.648604][ T5844] bridge_slave_0: entered allmulticast mode [ 63.655188][ T5844] bridge_slave_0: entered promiscuous mode [ 63.663356][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.671083][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.678393][ T5844] bridge_slave_1: entered allmulticast mode [ 63.684948][ T5844] bridge_slave_1: entered promiscuous mode [ 63.702335][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.713383][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.746822][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.763330][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.770522][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.796727][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.821085][ T5834] team0: Port device team_slave_0 added [ 63.850023][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.857430][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.883606][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.896625][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.910149][ T5834] team0: Port device team_slave_1 added [ 63.924905][ T5842] team0: Port device team_slave_0 added [ 63.944702][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.973490][ T5835] team0: Port device team_slave_0 added [ 63.980892][ T5842] team0: Port device team_slave_1 added [ 64.014394][ T5833] hsr_slave_0: entered promiscuous mode [ 64.020742][ T5833] hsr_slave_1: entered promiscuous mode [ 64.043606][ T5835] team0: Port device team_slave_1 added [ 64.051614][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.061610][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.088147][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.106520][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.113677][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.140194][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.157613][ T5844] team0: Port device team_slave_0 added [ 64.173312][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.180312][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.206540][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.231393][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.238829][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.264912][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.281869][ T5844] team0: Port device team_slave_1 added [ 64.326264][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.333872][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.359977][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.381310][ T5834] hsr_slave_0: entered promiscuous mode [ 64.388077][ T5834] hsr_slave_1: entered promiscuous mode [ 64.394279][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.402281][ T5834] Cannot create hsr debugfs directory [ 64.430015][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.438831][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.465286][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.486727][ T5852] Bluetooth: hci4: command tx timeout [ 64.486733][ T5841] Bluetooth: hci0: command tx timeout [ 64.494454][ T54] Bluetooth: hci3: command tx timeout [ 64.505057][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.512355][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.539057][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.565801][ T54] Bluetooth: hci1: command tx timeout [ 64.565810][ T5852] Bluetooth: hci2: command tx timeout [ 64.589371][ T5842] hsr_slave_0: entered promiscuous mode [ 64.595993][ T5842] hsr_slave_1: entered promiscuous mode [ 64.602438][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.610116][ T5842] Cannot create hsr debugfs directory [ 64.616216][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.623433][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.649787][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.717463][ T5835] hsr_slave_0: entered promiscuous mode [ 64.724118][ T5835] hsr_slave_1: entered promiscuous mode [ 64.730440][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.738474][ T5835] Cannot create hsr debugfs directory [ 64.810586][ T5844] hsr_slave_0: entered promiscuous mode [ 64.823192][ T5844] hsr_slave_1: entered promiscuous mode [ 64.829827][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.837497][ T5844] Cannot create hsr debugfs directory [ 64.955616][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.993075][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.033265][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.042572][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.129463][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.139216][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.164429][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.188182][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.232659][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.259744][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.284805][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.299954][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.347921][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.368578][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.394841][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.427700][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.498772][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.519140][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.529445][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.543400][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.553359][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.571484][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.599788][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.619819][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.627145][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.643777][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.667449][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.698254][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.705426][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.714392][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.721580][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.744963][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.759666][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.767287][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.810275][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.817448][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.828945][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.836403][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.897627][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.941581][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.951705][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.997600][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.004751][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.062645][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.069865][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.138654][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.183467][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.230737][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.238295][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.261790][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.269432][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.344468][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.439175][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.498587][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.562450][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.567394][ T54] Bluetooth: hci3: command tx timeout [ 66.570419][ T5852] Bluetooth: hci0: command tx timeout [ 66.575182][ T54] Bluetooth: hci4: command tx timeout [ 66.647421][ T5841] Bluetooth: hci2: command tx timeout [ 66.653074][ T5841] Bluetooth: hci1: command tx timeout [ 66.701537][ T5833] veth0_vlan: entered promiscuous mode [ 66.718894][ T5833] veth1_vlan: entered promiscuous mode [ 66.763976][ T5834] veth0_vlan: entered promiscuous mode [ 66.777208][ T5844] veth0_vlan: entered promiscuous mode [ 66.821723][ T5844] veth1_vlan: entered promiscuous mode [ 66.837594][ T5842] veth0_vlan: entered promiscuous mode [ 66.850155][ T5833] veth0_macvtap: entered promiscuous mode [ 66.875946][ T5834] veth1_vlan: entered promiscuous mode [ 66.891681][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.900501][ T5842] veth1_vlan: entered promiscuous mode [ 66.910973][ T5833] veth1_macvtap: entered promiscuous mode [ 66.961263][ T5844] veth0_macvtap: entered promiscuous mode [ 66.971007][ T5844] veth1_macvtap: entered promiscuous mode [ 66.997635][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.016847][ T5834] veth0_macvtap: entered promiscuous mode [ 67.028088][ T5842] veth0_macvtap: entered promiscuous mode [ 67.041641][ T5835] veth0_vlan: entered promiscuous mode [ 67.053038][ T5835] veth1_vlan: entered promiscuous mode [ 67.067061][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.084312][ T5834] veth1_macvtap: entered promiscuous mode [ 67.093989][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104234][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.113250][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.122348][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.137860][ T5842] veth1_macvtap: entered promiscuous mode [ 67.148361][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.159545][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.171150][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.201371][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.214097][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.226571][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.254570][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.266781][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.276990][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.287753][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.298826][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.308732][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.318866][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.328548][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.337330][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359059][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.371774][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.381963][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.392674][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.403486][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.418834][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.430499][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.441483][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.452874][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.462871][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.473460][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.484919][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.509457][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.520714][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.531571][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.542457][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.552405][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.562907][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.574022][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.584326][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593541][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.602402][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612023][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.630045][ T5835] veth0_macvtap: entered promiscuous mode [ 67.642113][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.651780][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.660768][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.669505][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707839][ T5835] veth1_macvtap: entered promiscuous mode [ 67.758673][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.769266][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.783940][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.796902][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.807136][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.818829][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829236][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.839809][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.850977][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.861617][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.872424][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.917774][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.930726][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.940712][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.951554][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.961500][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.971985][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.981945][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.992714][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.004673][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.017818][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.031992][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034380][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.041643][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.058852][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.067631][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.129658][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.140629][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.157361][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.162977][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.201062][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.209802][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.234715][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.289023][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.311732][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.381876][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.417272][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.478497][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.500451][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.519662][ T5921] team_slave_0: mtu less than device minimum [ 68.526098][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.542478][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.645930][ T54] Bluetooth: hci3: command tx timeout [ 68.647678][ T5852] Bluetooth: hci4: command tx timeout [ 68.651807][ T5841] Bluetooth: hci0: command tx timeout [ 68.692578][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.705665][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.726177][ T5841] Bluetooth: hci1: command tx timeout [ 68.726665][ T5852] Bluetooth: hci2: command tx timeout [ 68.804134][ T5929] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 68.855018][ T5931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.908470][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 69.306442][ T5944] Zero length message leads to an empty skb [ 69.406286][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 69.568643][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.593104][ T5965] SET target dimension over the limit! [ 69.665402][ T5970] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.842276][ T5983] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 69.947239][ T5977] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 70.066186][ T5987] xt_CT: No such helper "netbios-ns" [ 70.071869][ T5990] syzkaller1: entered promiscuous mode [ 70.092134][ T5990] syzkaller1: entered allmulticast mode [ 70.262607][ T6007] netlink: 'syz.0.24': attribute type 11 has an invalid length. [ 70.275071][ T6007] Bluetooth: MGMT ver 1.23 [ 70.340750][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23'. [ 70.536184][ T5986] infiniband syz1: set active [ 70.562706][ T5986] infiniband syz1: added team_slave_0 [ 70.571667][ T6017] sctp: [Deprecated]: syz.3.26 (pid 6017) Use of int in maxseg socket option. [ 70.571667][ T6017] Use struct sctp_assoc_value instead [ 70.636316][ T5986] RDS/IB: syz1: added [ 70.641020][ T5986] smc: adding ib device syz1 with port count 1 [ 70.662378][ T5986] smc: ib device syz1 port 1 has pnetid [ 70.725458][ T5852] Bluetooth: hci0: command tx timeout [ 70.726706][ T5841] Bluetooth: hci3: command tx timeout [ 70.731048][ T6002] syz.2.23 (6002) used greatest stack depth: 17264 bytes left [ 70.736639][ T5841] Bluetooth: hci4: command tx timeout [ 70.805428][ T5852] Bluetooth: hci1: command tx timeout [ 70.806399][ T6023] vlan2: entered promiscuous mode [ 70.816307][ T5852] Bluetooth: hci2: command tx timeout [ 70.926334][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.976713][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 71.014173][ T6031] xfrm1: entered promiscuous mode [ 71.046457][ T6031] xfrm1: entered allmulticast mode [ 71.253140][ T6041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.33'. [ 71.301627][ T6041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.33'. [ 71.424893][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 71.474882][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 71.563231][ T6053] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 71.606515][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 71.700722][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.707383][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.186985][ T6078] xt_limit: Overflow, try lower: 2147483649/128 [ 72.703381][ T6101] syz.3.53[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.704175][ T6101] syz.3.53[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.501934][ T6142] pimreg: entered allmulticast mode [ 73.553752][ T973] IPVS: starting estimator thread 0... [ 73.565732][ T6139] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 73.604625][ T6149] pimreg: left allmulticast mode [ 73.655504][ T6148] IPVS: using max 24 ests per chain, 57600 per kthread [ 73.711548][ T6142] pimreg: entered allmulticast mode [ 73.899681][ T6167] __nla_validate_parse: 12 callbacks suppressed [ 73.899702][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 74.026344][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 74.423257][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 74.442367][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 74.674084][ T6218] netlink: 'syz.4.80': attribute type 17 has an invalid length. [ 74.699035][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 74.746236][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.80'. [ 74.941680][ T6237] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 75.284202][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 75.308033][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 75.494284][ T6272] netlink: 284 bytes leftover after parsing attributes in process `syz.2.95'. [ 75.562874][ T6278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.95'. [ 75.687151][ T5852] Bluetooth: hci4: command tx timeout [ 75.694982][ T6287] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.041980][ T6307] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.334615][ T6320] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 76.443164][ T6327] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 76.450141][ T6327] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 76.732820][ T6342] IPVS: Scheduler module ip_vs_sip not found [ 76.754394][ T6342] openvswitch: netlink: Missing key (keys=40, expected=100) [ 76.765553][ T6346] raw_sendmsg: syz.4.115 forgot to set AF_INET. Fix it! [ 77.947329][ T6405] syz.3.134 (6405) used greatest stack depth: 16920 bytes left [ 78.148151][ T6424] siw: device registration error -23 [ 78.760462][ T6465] Cannot find add_set index 1 as target [ 79.044824][ T6479] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 79.064917][ T6479] __nla_validate_parse: 8 callbacks suppressed [ 79.064936][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 79.080299][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 79.237964][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 79.286688][ T6497] IPVS: length: 100 != 8 [ 79.291239][ T6496] IPVS: length: 100 != 8 [ 79.402895][ T6499] netlink: 'syz.4.164': attribute type 10 has an invalid length. [ 79.410996][ T6499] bridge0: port 3(team0) entered blocking state [ 79.420214][ T6499] bridge0: port 3(team0) entered disabled state [ 79.427167][ T6499] team0: entered allmulticast mode [ 79.432388][ T6499] team_slave_0: entered allmulticast mode [ 79.438284][ T6499] team_slave_1: entered allmulticast mode [ 79.445764][ T6499] team0: entered promiscuous mode [ 79.450833][ T6499] team_slave_0: entered promiscuous mode [ 79.457013][ T6499] team_slave_1: entered promiscuous mode [ 79.464334][ T6499] bridge0: port 3(team0) entered blocking state [ 79.470941][ T6499] bridge0: port 3(team0) entered forwarding state [ 79.483773][ T6504] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 79.553511][ T6507] dvmrp1: entered allmulticast mode [ 79.760977][ T6521] netlink: 43 bytes leftover after parsing attributes in process `syz.1.170'. [ 79.810809][ T6519] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.172'. [ 79.835818][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.233179][ T6542] dvmrp0: entered allmulticast mode [ 80.430775][ T6551] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 80.441409][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.451874][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.460391][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.468745][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.478567][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.489500][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.046832][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 81.140846][ T6585] netlink: 312 bytes leftover after parsing attributes in process `syz.2.185'. [ 81.167177][ T6590] netlink: 312 bytes leftover after parsing attributes in process `syz.2.185'. [ 81.377136][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.395529][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.402803][ T6553] bridge_slave_0: entered allmulticast mode [ 81.432678][ T6553] bridge_slave_0: entered promiscuous mode [ 81.444191][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451529][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.458839][ T6553] bridge_slave_1: entered allmulticast mode [ 81.465948][ T6553] bridge_slave_1: entered promiscuous mode [ 81.507581][ T6609] syz.1.188[6609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.507679][ T6609] syz.1.188[6609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.524621][ T6609] syz.1.188[6609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.557866][ T6609] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 81.600865][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.619023][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.649989][ T6619] xt_hashlimit: invalid interval [ 81.733108][ T6553] team0: Port device team_slave_0 added [ 81.761236][ T6553] team0: Port device team_slave_1 added [ 81.892614][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.900787][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.947100][ T46] cfg80211: failed to load regulatory.db [ 81.963650][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.026628][ T6640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.200'. [ 82.056569][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.074293][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.117377][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.145508][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.166131][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.244421][ T6553] hsr_slave_0: entered promiscuous mode [ 82.272465][ T6553] hsr_slave_1: entered promiscuous mode [ 82.289523][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.298129][ T6553] Cannot create hsr debugfs directory [ 82.421377][ T6654] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 82.472370][ T6656] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 82.500931][ T6654] team0: Failed to send options change via netlink (err -105) [ 82.514793][ T6654] team0: Port device netdevsim0 added [ 82.558722][ T6656] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 82.588490][ T5852] Bluetooth: hci3: command tx timeout [ 82.603586][ T6656] team0: Failed to send options change via netlink (err -105) [ 82.614511][ T6670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.633460][ T6656] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 82.666078][ T6656] team0: Port device netdevsim0 removed [ 82.687736][ T6656] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 82.897909][ T6553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.949219][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 83.029824][ T6553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.062776][ T6689] netlink: 'syz.0.218': attribute type 4 has an invalid length. [ 83.099041][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 83.179860][ T6553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.280543][ T6553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.304518][ T6699] netlink: 'syz.0.222': attribute type 21 has an invalid length. [ 83.329069][ T6699] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.473014][ T6553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.505605][ T6553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.537505][ T6553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.556127][ T6553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.674860][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.701999][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.730888][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.738093][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.774494][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.781680][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.867756][ T6723] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.876967][ T6723] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.885838][ T6723] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.894570][ T6723] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.914861][ T6723] vxlan0: entered promiscuous mode [ 83.921214][ T6723] vxlan0: entered allmulticast mode [ 83.988487][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.029406][ T6732] GUP no longer grows the stack in syz.1.234 (6732): 20003000-2000a000 (20001000) [ 84.048065][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.1.234 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 84.058717][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.068820][ T6732] Call Trace: [ 84.072120][ T6732] [ 84.075063][ T6732] dump_stack_lvl+0x241/0x360 [ 84.079788][ T6732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.085018][ T6732] ? __pfx__printk+0x10/0x10 [ 84.089639][ T6732] ? find_vma+0xf9/0x170 [ 84.093911][ T6732] ? vma_is_secretmem+0xd/0x50 [ 84.098710][ T6732] ? check_vma_flags+0x52b/0x5a0 [ 84.103775][ T6732] __get_user_pages+0x4385/0x49e0 [ 84.108834][ T6732] ? 0xffffffffa0000950 [ 84.113069][ T6732] ? __pfx___get_user_pages+0x10/0x10 [ 84.118506][ T6732] __gup_longterm_locked+0x49a/0x17f0 [ 84.123906][ T6732] ? __pfx___might_resched+0x10/0x10 [ 84.129200][ T6732] ? __pfx___gup_longterm_locked+0x10/0x10 [ 84.135014][ T6732] ? down_read+0x82b/0xa40 [ 84.139448][ T6732] ? is_valid_gup_args+0x124/0x200 [ 84.144651][ T6732] pin_user_pages+0x137/0x1f0 [ 84.149353][ T6732] ? __pfx_pin_user_pages+0x10/0x10 [ 84.154581][ T6732] ? trace_kmalloc+0x1f/0xd0 [ 84.159315][ T6732] xdp_umem_create+0x978/0xf30 [ 84.164121][ T6732] xsk_setsockopt+0x732/0x950 [ 84.168832][ T6732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.174071][ T6732] ? __pfx_lock_acquire+0x10/0x10 [ 84.179124][ T6732] ? aa_sock_opt_perm+0x79/0x120 [ 84.184103][ T6732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.189340][ T6732] do_sock_setsockopt+0x3af/0x720 [ 84.194403][ T6732] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 84.200069][ T6732] ? __fget_files+0x395/0x410 [ 84.204774][ T6732] ? __fget_files+0x2a/0x410 [ 84.209414][ T6732] __x64_sys_setsockopt+0x1ee/0x280 [ 84.214664][ T6732] do_syscall_64+0xf3/0x230 [ 84.219207][ T6732] ? clear_bhb_loop+0x35/0x90 [ 84.223928][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.229858][ T6732] RIP: 0033:0x7f3e3417ff19 [ 84.234316][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.253956][ T6732] RSP: 002b:00007f3e34faa058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.262413][ T6732] RAX: ffffffffffffffda RBX: 00007f3e34345fa0 RCX: 00007f3e3417ff19 [ 84.270507][ T6732] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 84.278513][ T6732] RBP: 00007f3e341f3cc8 R08: 000000000000001c R09: 0000000000000000 [ 84.286518][ T6732] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 84.294610][ T6732] R13: 0000000000000000 R14: 00007f3e34345fa0 R15: 00007ffcf5460f08 [ 84.302633][ T6732] [ 84.387666][ T6732] netdevsim netdevsim1: Direct firmware load for • failed with error -2 [ 84.413810][ T6732] netdevsim netdevsim1: Falling back to sysfs fallback for: • [ 84.456161][ T6759] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 84.523811][ T6765] __nla_validate_parse: 2 callbacks suppressed [ 84.523830][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 84.551663][ T6766] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 84.571915][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.586463][ T6766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.612049][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.635208][ T6771] netlink: 'syz.0.241': attribute type 24 has an invalid length. [ 84.646265][ T5852] Bluetooth: hci3: command tx timeout [ 84.903767][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 84.927857][ T6553] veth0_vlan: entered promiscuous mode [ 84.948669][ T6553] veth1_vlan: entered promiscuous mode [ 85.016199][ T6553] veth0_macvtap: entered promiscuous mode [ 85.043809][ T6553] veth1_macvtap: entered promiscuous mode [ 85.064854][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.076428][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.092270][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.109541][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.121957][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.140738][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.150832][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.162078][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.171999][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.182514][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.194184][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.203292][ T6792] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.247'. [ 85.240227][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.272292][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295427][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.314746][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.330986][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.332650][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 85.349568][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.370836][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.391270][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.422549][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.432757][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.443395][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.454139][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.465036][ T6553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.474742][ T6553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.483580][ T6553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.491349][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 85.492877][ T6553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.510965][ T6800] No such timeout policy "syz0" [ 85.697107][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.716297][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.774153][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.804105][ T6816] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 85.807342][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.251267][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 86.266255][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.294453][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.325271][ T6843] dvmrp1: entered allmulticast mode [ 86.334241][ T6844] dvmrp1: left allmulticast mode [ 86.452148][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 86.626492][ T6852] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 86.657853][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.673777][ T6852] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.769668][ T6863] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.271'. [ 86.906933][ T6869] IPv6: sit1: Disabled Multicast RS [ 87.008842][ T6880] syz.2.275[6880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.009475][ T6880] syz.2.275[6880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.082643][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 87.135934][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 87.280049][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.588332][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.612739][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.652123][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.675703][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.683673][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.693094][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.709871][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.792255][ T6906] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 87.835030][ T6908] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.018925][ T6923] syz.0.287[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.019691][ T6923] syz.0.287[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.131787][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.164712][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 88.279077][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.395455][ T973] IPVS: starting estimator thread 0... [ 88.506823][ T6944] IPVS: using max 24 ests per chain, 57600 per kthread [ 88.563284][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.626405][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.633550][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.641616][ T6896] bridge_slave_0: entered allmulticast mode [ 88.648825][ T6896] bridge_slave_0: entered promiscuous mode [ 88.657662][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.664890][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.672282][ T6896] bridge_slave_1: entered allmulticast mode [ 88.679398][ T6896] bridge_slave_1: entered promiscuous mode [ 88.766471][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.788702][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.883493][ T6896] team0: Port device team_slave_0 added [ 88.906806][ T6896] team0: Port device team_slave_1 added [ 88.975530][ T6973] syz.1.302[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.976176][ T6973] syz.1.302[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.019917][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.042595][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.081527][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.103881][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.111140][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.114747][ T6979] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 89.137958][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.212302][ T11] bridge_slave_1: left allmulticast mode [ 89.230238][ T11] bridge_slave_1: left promiscuous mode [ 89.244308][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.296269][ T11] bridge_slave_0: left allmulticast mode [ 89.301966][ T11] bridge_slave_0: left promiscuous mode [ 89.318360][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.348022][ T6990] xt_policy: too many policy elements [ 89.766603][ T5841] Bluetooth: hci3: command tx timeout [ 89.803350][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.816950][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.827872][ T11] bond0 (unregistering): Released all slaves [ 89.860140][ T6997] netlink: 'syz.0.310': attribute type 21 has an invalid length. [ 90.004171][ T7005] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 90.031278][ T7005] __nla_validate_parse: 7 callbacks suppressed [ 90.038624][ T7005] netlink: 228 bytes leftover after parsing attributes in process `syz.1.312'. [ 90.119750][ T6896] hsr_slave_0: entered promiscuous mode [ 90.128793][ T6896] hsr_slave_1: entered promiscuous mode [ 90.141798][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.149543][ T6896] Cannot create hsr debugfs directory [ 90.222063][ T7016] batadv0: entered promiscuous mode [ 90.228882][ T7016] batadv_slave_0: entered promiscuous mode [ 90.234959][ T7016] batadv_slave_0: left promiscuous mode [ 90.276214][ T7016] batadv0: left promiscuous mode [ 90.608502][ T11] hsr_slave_0: left promiscuous mode [ 90.627135][ T11] hsr_slave_1: left promiscuous mode [ 90.638972][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.647734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.656226][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.663714][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.686253][ T11] veth1_macvtap: left promiscuous mode [ 90.692407][ T11] veth0_macvtap: left promiscuous mode [ 90.702407][ T11] veth1_vlan: left promiscuous mode [ 90.708720][ T11] veth0_vlan: left promiscuous mode [ 90.822227][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 91.066372][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 91.259202][ T11] team0 (unregistering): Port device team_slave_1 removed [ 91.331939][ T11] team0 (unregistering): Port device team_slave_0 removed [ 91.420931][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 91.700532][ T7035] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 91.714361][ T7042] tipc: Started in network mode [ 91.719554][ T7042] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.734999][ T7042] tipc: Enabled bearer , priority 10 [ 91.845980][ T5841] Bluetooth: hci3: command tx timeout [ 91.882218][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 92.004448][ T7071] ebt_limit: overflow, try lower: 570423552/2483027968 [ 92.047353][ T7070] ebt_limit: overflow, try lower: 570423552/2483027968 [ 92.274646][ T7084] netlink: 80 bytes leftover after parsing attributes in process `syz.1.336'. [ 92.312083][ T7086] ieee802154 phy1 wpan1: encryption failed: -22 [ 92.348175][ T6896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.402071][ T6896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.448758][ T6896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.490505][ T6896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.554627][ T7093] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 92.569870][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.582988][ T7093] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 92.592497][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.600970][ T7093] netlink: 236 bytes leftover after parsing attributes in process `syz.2.338'. [ 92.625308][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.632719][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.654619][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.661938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.809109][ T7107] net veth1_virt_wifi : renamed from virt_wifi0 [ 92.847717][ T5916] tipc: Node number set to 2886997162 [ 92.988518][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.996410][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 93.015906][ T7120] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 93.466526][ T7147] syz.0.349 (7147) used obsolete PPPIOCDETACH ioctl [ 93.502904][ T6896] veth0_vlan: entered promiscuous mode [ 93.571481][ T6896] veth1_vlan: entered promiscuous mode [ 93.658663][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 93.678163][ T7156] netlink: 'syz.1.353': attribute type 4 has an invalid length. [ 93.699566][ T6896] veth0_macvtap: entered promiscuous mode [ 93.715137][ T6896] veth1_macvtap: entered promiscuous mode [ 93.768059][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.795431][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.827538][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.850138][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.863883][ T7166] Bluetooth: MGMT ver 1.23 [ 93.874171][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.901701][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.918900][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.930500][ T5841] Bluetooth: hci3: command tx timeout [ 93.937631][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.948237][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.959142][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.972052][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.049437][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.105445][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.115300][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.145401][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.158905][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.183293][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.193435][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.205589][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.219667][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.231058][ T7180] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 94.271498][ T6896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.301318][ T6896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.315548][ T6896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.324352][ T6896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.344814][ T7183] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 94.385459][ T7183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.414048][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 94.577287][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.589885][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.612453][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.628058][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.695099][ T7195] netlink: 'syz.3.366': attribute type 11 has an invalid length. [ 95.114541][ T7225] veth0: entered promiscuous mode [ 95.124671][ T7228] __nla_validate_parse: 4 callbacks suppressed [ 95.124690][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 95.130236][ T7225] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 95.152200][ T7223] veth0: left promiscuous mode [ 95.311413][ T7233] openvswitch: netlink: Flow key attr not present in new flow. [ 95.503615][ T7241] netem: change failed [ 95.510687][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 95.651313][ T7237] netlink: 'syz.2.378': attribute type 5 has an invalid length. [ 95.771760][ T7248] netlink: 432 bytes leftover after parsing attributes in process `syz.2.378'. [ 95.936216][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 96.024811][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 96.299335][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.452066][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 96.736274][ T7305] netlink: 300 bytes leftover after parsing attributes in process `syz.1.399'. [ 96.755211][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.785901][ T7305] netlink: 300 bytes leftover after parsing attributes in process `syz.1.399'. [ 96.919698][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.929526][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.938557][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.974418][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.986900][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.999604][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.007878][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.047239][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 97.069252][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 97.089899][ T7319] vlan3: entered allmulticast mode [ 97.095116][ T7319] hsr0: entered allmulticast mode [ 97.125619][ T7319] hsr_slave_0: entered allmulticast mode [ 97.145555][ T7319] hsr_slave_1: entered allmulticast mode [ 97.202672][ T7321] geneve2: entered promiscuous mode [ 97.235859][ T7321] geneve2: entered allmulticast mode [ 97.383288][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.632262][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 97.673646][ T35] bridge_slave_1: left allmulticast mode [ 97.679834][ T35] bridge_slave_1: left promiscuous mode [ 97.697896][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.722876][ T35] bridge_slave_0: left allmulticast mode [ 97.734212][ T35] bridge_slave_0: left promiscuous mode [ 97.752226][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.163852][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.174853][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.190375][ T35] bond0 (unregistering): Released all slaves [ 98.222188][ T7366] team_slave_0: entered promiscuous mode [ 98.228306][ T7366] team_slave_1: entered promiscuous mode [ 98.236618][ T7366] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.267172][ T7367] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 98.279288][ T7368] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 98.519565][ T7388] Illegal XDP return value 4294967283 on prog (id 144) dev N/A, expect packet loss! [ 98.623157][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.685913][ T5889] IPVS: starting estimator thread 0... [ 98.785474][ T7406] IPVS: using max 24 ests per chain, 57600 per kthread [ 98.849361][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.858986][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.874913][ T7312] bridge_slave_0: entered allmulticast mode [ 98.883500][ T7312] bridge_slave_0: entered promiscuous mode [ 98.912451][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.935878][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.957462][ T7312] bridge_slave_1: entered allmulticast mode [ 98.968447][ T7421] netlink: 'syz.0.435': attribute type 18 has an invalid length. [ 99.022908][ T7312] bridge_slave_1: entered promiscuous mode [ 99.131862][ T35] hsr_slave_0: left promiscuous mode [ 99.135929][ T5852] Bluetooth: hci3: command tx timeout [ 99.151812][ T35] hsr_slave_1: left promiscuous mode [ 99.157904][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.166076][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.174217][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.183334][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.211335][ T35] veth1_macvtap: left promiscuous mode [ 99.217466][ T35] veth0_macvtap: left promiscuous mode [ 99.223208][ T35] veth1_vlan: left promiscuous mode [ 99.228887][ T35] veth0_vlan: left promiscuous mode [ 99.629184][ T35] team0 (unregistering): Port device team_slave_1 removed [ 99.688060][ T35] team0 (unregistering): Port device team_slave_0 removed [ 100.222909][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.251400][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.281258][ T7454] __nla_validate_parse: 4 callbacks suppressed [ 100.281277][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 100.297088][ T7454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 100.401894][ T7458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.442'. [ 100.452465][ T7312] team0: Port device team_slave_0 added [ 100.474487][ T7458] x_tables: duplicate underflow at hook 1 [ 100.484373][ T7312] team0: Port device team_slave_1 added [ 100.552119][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.444'. [ 100.573933][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.582919][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.610980][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.663239][ T7466] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.446'. [ 100.677962][ T7467] sctp: [Deprecated]: syz.3.444 (pid 7467) Use of int in max_burst socket option deprecated. [ 100.677962][ T7467] Use struct sctp_assoc_value instead [ 100.706200][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.714423][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.745201][ T7470] xt_cgroup: path and classid specified [ 100.748221][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.834895][ T7312] hsr_slave_0: entered promiscuous mode [ 100.852627][ T7312] hsr_slave_1: entered promiscuous mode [ 100.863267][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.874978][ T7312] Cannot create hsr debugfs directory [ 100.949323][ T7478] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.961226][ T7478] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 101.153226][ T7485] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 101.225206][ T5852] Bluetooth: hci3: command tx timeout [ 101.433707][ T7501] netlink: 596 bytes leftover after parsing attributes in process `syz.0.457'. [ 101.478254][ T7501] netlink: 256 bytes leftover after parsing attributes in process `syz.0.457'. [ 101.540281][ T7312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.568434][ T7312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.599176][ T7312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.642513][ T7312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.665553][ T7509] ieee802154 phy1 wpan1: encryption failed: -22 [ 101.686975][ T7509] macvlan0: entered allmulticast mode [ 101.692420][ T7509] veth1_vlan: entered allmulticast mode [ 101.756052][ T7513] veth1_vlan: left allmulticast mode [ 101.801783][ T7513] macvlan0 (unregistering): left allmulticast mode [ 101.876477][ T7515] netlink: 52 bytes leftover after parsing attributes in process `syz.2.461'. [ 102.070009][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.098148][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 102.125105][ T7529] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 102.147460][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.159307][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 102.260802][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 102.270042][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.277289][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.288256][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.295434][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.342694][ T7537] vlan2: entered promiscuous mode [ 102.351741][ T7536] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 102.392407][ T7534] vlan2: entered promiscuous mode [ 102.813915][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.829004][ T7568] netlink: 'syz.3.477': attribute type 2 has an invalid length. [ 102.865886][ T7571] syz.1.478[7571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.865974][ T7571] syz.1.478[7571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.917290][ T7571] syz.1.478[7571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.166364][ T7312] veth0_vlan: entered promiscuous mode [ 103.192133][ T7312] veth1_vlan: entered promiscuous mode [ 103.214202][ T7312] veth0_macvtap: entered promiscuous mode [ 103.250078][ T7312] veth1_macvtap: entered promiscuous mode [ 103.268109][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.286205][ T5852] Bluetooth: hci3: command tx timeout [ 103.294302][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.369834][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.409152][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.422551][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.448540][ T7595] Unsupported ieee802154 address type: 0 [ 103.455716][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.472962][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.484466][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.498284][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.508851][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.519955][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.628971][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.640319][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.650347][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.662927][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.672938][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.687633][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.698308][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.709353][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.731870][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.736207][ T7611] unsupported nlmsg_type 40 [ 103.764758][ T7312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.774604][ T7312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.783525][ T7312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.800344][ T7312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.969493][ T7627] syz.1.495[7627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.969891][ T7627] syz.1.495[7627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.307040][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.324614][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.351396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.367387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.762415][ T7659] netlink: 'syz.3.505': attribute type 11 has an invalid length. [ 104.840945][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.048020][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.181125][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.223557][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.572758][ T7672] __nla_validate_parse: 6 callbacks suppressed [ 105.572777][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 105.588463][ T7670] x_tables: duplicate underflow at hook 3 [ 105.683798][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 105.732849][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.738244][ T7670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.747462][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.750977][ T7670] bond0: (slave bond1): Enslaving as an active interface with an up link [ 105.762959][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.763820][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.778783][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.792772][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.011245][ T52] bridge_slave_1: left allmulticast mode [ 106.017782][ T52] bridge_slave_1: left promiscuous mode [ 106.033757][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.081477][ T52] bridge_slave_0: left allmulticast mode [ 106.108139][ T52] bridge_slave_0: left promiscuous mode [ 106.135566][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.682806][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.696402][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.711350][ T52] bond0 (unregistering): Released all slaves [ 106.721382][ T7701] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.997002][ T7732] netlink: 830 bytes leftover after parsing attributes in process `syz.2.524'. [ 107.110631][ T7738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.118390][ T7738] IPv6: NLM_F_CREATE should be set when creating new route [ 107.125677][ T7738] IPv6: NLM_F_CREATE should be set when creating new route [ 107.135222][ T7741] netlink: 'syz.1.526': attribute type 12 has an invalid length. [ 107.564778][ T52] hsr_slave_0: left promiscuous mode [ 107.580868][ T52] hsr_slave_1: left promiscuous mode [ 107.593584][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.601420][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.637355][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.665649][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.706745][ T52] veth1_macvtap: left promiscuous mode [ 107.713563][ T52] veth0_macvtap: left promiscuous mode [ 107.723226][ T52] veth1_vlan: left promiscuous mode [ 107.729038][ T52] veth0_vlan: left promiscuous mode [ 107.729574][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'. [ 107.775204][ T7768] netlink: 256 bytes leftover after parsing attributes in process `syz.2.533'. [ 107.846841][ T5841] Bluetooth: hci3: command tx timeout [ 108.341429][ T7785] atomic_op ffff888029cb3198 conn xmit_atomic 0000000000000000 [ 108.421819][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.539'. [ 108.440493][ T7790] netlink: 'syz.2.539': attribute type 7 has an invalid length. [ 108.450945][ T7790] netlink: 'syz.2.539': attribute type 8 has an invalid length. [ 108.463847][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 108.653889][ T52] team0 (unregistering): Port device team_slave_1 removed [ 108.694636][ T52] team0 (unregistering): Port device team_slave_0 removed [ 109.094980][ T7773] netlink: 'syz.3.536': attribute type 5 has an invalid length. [ 109.145953][ T7796] syzkaller1: entered promiscuous mode [ 109.151481][ T7796] syzkaller1: entered allmulticast mode [ 109.173158][ T7682] chnl_net:caif_netlink_parms(): no params data found [ 109.572567][ T7682] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.580048][ T7682] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.610821][ T7682] bridge_slave_0: entered allmulticast mode [ 109.635817][ T7682] bridge_slave_0: entered promiscuous mode [ 109.665812][ T7682] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.672960][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.695503][ T7682] bridge_slave_1: entered allmulticast mode [ 109.702917][ T7682] bridge_slave_1: entered promiscuous mode [ 109.830755][ T7682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.870760][ T7682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.902634][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 109.925770][ T5841] Bluetooth: hci3: command tx timeout [ 110.004954][ T7682] team0: Port device team_slave_0 added [ 110.046910][ T7682] team0: Port device team_slave_1 added [ 110.297596][ T7682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.304591][ T7682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.332361][ T7682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.373907][ T7682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.388237][ T7682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.416483][ T7682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.548527][ T7682] hsr_slave_0: entered promiscuous mode [ 110.602467][ T7682] hsr_slave_1: entered promiscuous mode [ 110.656012][ T7682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.663624][ T7682] Cannot create hsr debugfs directory [ 111.290725][ T7895] vlan4: entered promiscuous mode [ 111.304049][ T7895] vlan4: entered allmulticast mode [ 111.463194][ T5835] [ 111.465567][ T5835] ============================= [ 111.470511][ T5835] [ BUG: Invalid wait context ] [ 111.475359][ T5835] 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 Not tainted [ 111.482449][ T5835] ----------------------------- [ 111.487355][ T5835] syz-executor/5835 is trying to lock: [ 111.492789][ T5835] ffff888059115a00 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 111.501773][ T5835] other info that might help us debug this: [ 111.507651][ T5835] context-{5:5} [ 111.511102][ T5835] 6 locks held by syz-executor/5835: [ 111.516382][ T5835] #0: ffffffff8e9eb5d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x27f/0x1f90 [ 111.525418][ T5835] #1: ffff8880339da8e0 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x29d/0x1f90 [ 111.534356][ T5835] #2: ffff88807934bc60 (&mm->mmap_lock/1){+.+.}-{4:4}, at: copy_mm+0x3df/0x1f90 [ 111.543478][ T5835] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x82/0x380 [ 111.552960][ T5835] #4: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 111.562897][ T5835] #5: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 111.572293][ T5835] stack backtrace: [ 111.575991][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 111.586816][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.596862][ T5835] Call Trace: [ 111.600130][ T5835] [ 111.603048][ T5835] dump_stack_lvl+0x241/0x360 [ 111.607742][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.612929][ T5835] ? __pfx__printk+0x10/0x10 [ 111.617520][ T5835] ? validate_chain+0x11e/0x5920 [ 111.622456][ T5835] __lock_acquire+0x15a8/0x2100 [ 111.627418][ T5835] lock_acquire+0x1ed/0x550 [ 111.631915][ T5835] ? trie_delete_elem+0x96/0x6a0 [ 111.636839][ T5835] ? __pfx_lock_acquire+0x10/0x10 [ 111.641932][ T5835] ? __lock_acquire+0x1397/0x2100 [ 111.646944][ T5835] _raw_spin_lock_irqsave+0xd5/0x120 [ 111.652214][ T5835] ? trie_delete_elem+0x96/0x6a0 [ 111.657138][ T5835] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 111.663015][ T5835] ? __pfx_lock_acquire+0x10/0x10 [ 111.668023][ T5835] ? kvm_sched_clock_read+0x11/0x20 [ 111.673207][ T5835] trie_delete_elem+0x96/0x6a0 [ 111.677956][ T5835] ? __pfx___cant_migrate+0x10/0x10 [ 111.683146][ T5835] ? bpf_trace_run4+0x244/0x590 [ 111.688006][ T5835] bpf_prog_41385012b43a9f2e+0x49/0x4d [ 111.693446][ T5835] bpf_trace_run4+0x334/0x590 [ 111.698214][ T5835] ? psi_group_change+0xb4e/0x1190 [ 111.703401][ T5835] ? __pfx_bpf_trace_run4+0x10/0x10 [ 111.708594][ T5835] ? __pfx_probe_sched_switch+0x10/0x10 [ 111.714139][ T5835] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 111.720824][ T5835] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 111.726890][ T5835] __traceiter_sched_switch+0x98/0xd0 [ 111.732253][ T5835] __schedule+0x22bc/0x4c30 [ 111.736746][ T5835] ? __pfx___schedule+0x10/0x10 [ 111.741579][ T5835] ? mark_lock+0x9a/0x360 [ 111.745905][ T5835] ? preempt_schedule+0xe1/0xf0 [ 111.750737][ T5835] preempt_schedule_common+0x84/0xd0 [ 111.756002][ T5835] preempt_schedule+0xe1/0xf0 [ 111.760678][ T5835] ? __pfx_preempt_schedule+0x10/0x10 [ 111.766027][ T5835] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.771909][ T5835] ? __page_table_check_ptes_set+0x30f/0x410 [ 111.777876][ T5835] ? copy_pmd_range+0x744f/0x7eb0 [ 111.782892][ T5835] preempt_schedule_thunk+0x1a/0x30 [ 111.788076][ T5835] _raw_spin_unlock+0x3e/0x50 [ 111.792731][ T5835] copy_pmd_range+0x74aa/0x7eb0 [ 111.797575][ T5835] ? __pfx_validate_chain+0x10/0x10 [ 111.802850][ T5835] ? preempt_count_add+0x93/0x190 [ 111.807868][ T5835] ? __pfx_copy_pmd_range+0x10/0x10 [ 111.813059][ T5835] ? look_up_lock_class+0x77/0x170 [ 111.818157][ T5835] ? register_lock_class+0x102/0x980 [ 111.823426][ T5835] ? __pfx_mas_destroy+0x10/0x10 [ 111.828347][ T5835] ? mark_lock+0x9a/0x360 [ 111.832667][ T5835] ? __lock_acquire+0x1397/0x2100 [ 111.837687][ T5835] copy_page_range+0x99f/0xe90 [ 111.842448][ T5835] ? __pfx_copy_page_range+0x10/0x10 [ 111.847720][ T5835] ? __pfx_up_write+0x10/0x10 [ 111.852384][ T5835] ? __asan_memset+0x23/0x50 [ 111.856973][ T5835] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 111.863737][ T5835] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 111.870232][ T5835] copy_mm+0x11c7/0x1f90 [ 111.874461][ T5835] ? __pfx_copy_mm+0x10/0x10 [ 111.879035][ T5835] ? __init_rwsem+0x122/0x160 [ 111.883802][ T5835] ? copy_signal+0x51c/0x640 [ 111.888483][ T5835] copy_process+0x1845/0x3d50 [ 111.893156][ T5835] ? copy_process+0x9fa/0x3d50 [ 111.897919][ T5835] ? __lock_acquire+0x1397/0x2100 [ 111.902956][ T5835] ? __pfx_copy_process+0x10/0x10 [ 111.907966][ T5835] kernel_clone+0x226/0x8e0 [ 111.912476][ T5835] ? __pfx_kernel_clone+0x10/0x10 [ 111.918111][ T5835] __x64_sys_clone+0x258/0x2a0 [ 111.922868][ T5835] ? __pfx___x64_sys_clone+0x10/0x10 [ 111.928138][ T5835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.934102][ T5835] ? exc_page_fault+0x590/0x8b0 [ 111.938969][ T5835] ? do_syscall_64+0xb6/0x230 [ 111.943629][ T5835] do_syscall_64+0xf3/0x230 [ 111.948118][ T5835] ? clear_bhb_loop+0x35/0x90 [ 111.952787][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.958675][ T5835] RIP: 0033:0x7f450df76793 [ 111.963155][ T5835] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 111.982739][ T5835] RSP: 002b:00007ffdaaa365b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 111.991228][ T5835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f450df76793 [ 111.999199][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 112.007173][ T5835] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.015132][ T5835] R10: 000055558d5cf7d0 R11: 0000000000000246 R12: 0000000000000000 [ 112.023088][ T5835] R13: 000000000001b2ec R14: 000000000001b243 R15: 00007ffdaaa36740 [ 112.031067][ T5835] [ 112.046501][ T5841] Bluetooth: hci3: command tx timeout [ 112.138643][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 112.513943][ T3478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.629740][ T3478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.709393][ T3478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.758849][ T3478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.828269][ T3478] bridge_slave_1: left allmulticast mode [ 112.833920][ T3478] bridge_slave_1: left promiscuous mode [ 112.839613][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.847822][ T3478] bridge_slave_0: left allmulticast mode [ 112.853594][ T3478] bridge_slave_0: left promiscuous mode [ 112.859451][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.010432][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.023105][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.035546][ T3478] bond0 (unregistering): (slave team0): Releasing backup interface [ 113.044416][ T3478] bond0 (unregistering): Released all slaves [ 113.104823][ T3478] tipc: Disabling bearer [ 113.110612][ T3478] tipc: Left network mode [ 113.264559][ T3478] hsr_slave_0: left promiscuous mode [ 113.270378][ T3478] hsr_slave_1: left promiscuous mode [ 113.277344][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.284745][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.293337][ T3478] veth1_macvtap: left promiscuous mode [ 113.299152][ T3478] veth0_macvtap: left promiscuous mode [ 113.304726][ T3478] veth1_vlan: left promiscuous mode [ 113.310123][ T3478] veth0_vlan: left promiscuous mode [ 113.348145][ T3478] pimreg (unregistering): left allmulticast mode [ 113.416562][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 113.438055][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 113.798141][ T3478] IPVS: stop unused estimator thread 0... [ 113.849660][ T3478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.898259][ T3478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.959213][ T3478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.002887][ T3478] bond0: (slave netdevsim0): Releasing backup interface [ 114.010797][ T3478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.058318][ T3478] bridge_slave_1: left allmulticast mode [ 114.063970][ T3478] bridge_slave_1: left promiscuous mode [ 114.069696][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.077556][ T3478] bridge_slave_0: left allmulticast mode [ 114.083190][ T3478] bridge_slave_0: left promiscuous mode [ 114.089902][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.098125][ T3478] bridge_slave_1: left allmulticast mode [ 114.103843][ T3478] bridge_slave_1: left promiscuous mode [ 114.109564][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.117933][ T3478] bridge_slave_0: left allmulticast mode [ 114.123572][ T3478] bridge_slave_0: left promiscuous mode [ 114.129344][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.192748][ T3478] dvmrp0 (unregistering): left allmulticast mode [ 114.407663][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.417915][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.427309][ T3478] bond0 (unregistering): Released all slaves [ 114.439502][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.451018][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.460493][ T3478] bond0 (unregistering): Released all slaves [ 114.469943][ T3478] bond1 (unregistering): Released all slaves [ 114.718624][ T3478] hsr_slave_0: left promiscuous mode [ 114.724668][ T3478] hsr_slave_1: left promiscuous mode [ 114.745203][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.753026][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.762653][ T3478] hsr_slave_0: left promiscuous mode [ 114.768774][ T3478] hsr_slave_1: left promiscuous mode [ 114.774590][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.782051][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.789671][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.797151][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.807223][ T3478] veth1_macvtap: left promiscuous mode [ 114.812776][ T3478] veth0_macvtap: left promiscuous mode [ 114.818454][ T3478] veth1_vlan: left promiscuous mode [ 114.823686][ T3478] veth0_vlan: left promiscuous mode [ 114.845047][ T3478] infiniband syz1: set down [ 114.930265][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 114.951644][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 115.088843][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 115.108887][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 115.116488][ T11] smc: removing ib device syz1