last executing test programs: 1m51.473760363s ago: executing program 0 (id=2858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m51.361201159s ago: executing program 0 (id=2859): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.216949075s ago: executing program 2 (id=2861): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.207110086s ago: executing program 0 (id=2863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) 1m42.092576043s ago: executing program 0 (id=2866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r5, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) 1m42.036246136s ago: executing program 2 (id=2867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m41.909954903s ago: executing program 2 (id=2870): syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x101100) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x2, 0xa, 0x300) socket$inet6(0xa, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1m41.341794636s ago: executing program 2 (id=2871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="3ef7f8ce1966279504", 0x9}], 0x1}, 0xc804) 1m41.151906647s ago: executing program 1 (id=2874): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="495300000000001a00006700000008000300", @ANYRES32=0x0, @ANYBLOB="100027c1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m41.118974889s ago: executing program 1 (id=2875): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) 1m41.104308699s ago: executing program 0 (id=2876): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000240), 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.075622161s ago: executing program 1 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) 1m30.14782515s ago: executing program 1 (id=2881): syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x101100) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x2, 0xa, 0x300) socket$inet6(0xa, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1m30.14506578s ago: executing program 2 (id=2882): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc1, 0xffffffffffffffff, 0x3db4, 0x7fffffff, 0x400}, 0x0, 0x0) 1m30.132108161s ago: executing program 0 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m30.081185794s ago: executing program 4 (id=2884): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m30.033700067s ago: executing program 4 (id=2885): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000001a00006700000008000300", @ANYRES32=0x0, @ANYBLOB="100027c1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m29.963540361s ago: executing program 1 (id=2886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r5, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) 1m29.914534564s ago: executing program 4 (id=2887): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x800) 1m29.871444926s ago: executing program 4 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0, 0x100000000000000}, 0x38) 1m29.830636079s ago: executing program 4 (id=2889): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000100)="48c5", 0x0}, 0x20) 1m29.80613437s ago: executing program 4 (id=2890): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20c002, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0500"}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m29.225035343s ago: executing program 2 (id=2891): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e00060000000800", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a6264", 0x29, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m29.052986933s ago: executing program 1 (id=2892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="3ef7f8ce1966279504", 0x9}], 0x1}, 0xc804) 1m14.885751759s ago: executing program 32 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m13.865697857s ago: executing program 33 (id=2892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="3ef7f8ce1966279504", 0x9}], 0x1}, 0xc804) 1m13.847758439s ago: executing program 34 (id=2891): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e00060000000800", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a6264", 0x29, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m13.81988048s ago: executing program 35 (id=2890): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20c002, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0500"}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.737024383s ago: executing program 8 (id=3404): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000a184e81300000000000061"], 0x0, 0x43}, 0x28) 2.723219834s ago: executing program 8 (id=3405): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e00001800028004001200050016300100000008"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 2.500890226s ago: executing program 8 (id=3409): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 2.461033139s ago: executing program 8 (id=3410): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, 0x0) 2.390789193s ago: executing program 5 (id=3412): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) 2.347262675s ago: executing program 5 (id=3413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 2.328976707s ago: executing program 3 (id=3414): r0 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'net'}]}, 0x5) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000340002800800", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa140007"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 2.158256326s ago: executing program 6 (id=3419): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0x825}], 0x1, 0x0, 0x0, 0xc0}, 0x804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.147565127s ago: executing program 3 (id=3420): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 2.046021123s ago: executing program 3 (id=3422): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(r0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44890) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4004004) 1.977540167s ago: executing program 3 (id=3424): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x160) socket$nl_route(0x10, 0x3, 0x0) 1.944939968s ago: executing program 6 (id=3425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.838632605s ago: executing program 7 (id=3426): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a0000000800"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.837325585s ago: executing program 7 (id=3427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.74125198s ago: executing program 7 (id=3428): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x64000090) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x9c1, 0x7, 0x2, 0xb, 0x2, 0x786b, 0xfffffff8, 0x58, r1}, 0x20) 1.733107981s ago: executing program 6 (id=3429): socket$rds(0x15, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) write(r2, &(0x7f0000000440), 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0xffffd000) sendmsg$kcm(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 1.648907145s ago: executing program 7 (id=3430): r0 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'net'}]}, 0x5) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000340002800800", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa140007"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 1.634494736s ago: executing program 6 (id=3431): socket(0x8000000010, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x101100) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x2, 0xa, 0x300) socket$inet6(0xa, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 1.604127158s ago: executing program 8 (id=3432): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x14) getpid() r5 = syz_open_procfs(0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./cgroup\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x3ea) 1.428995298s ago: executing program 5 (id=3433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.382745581s ago: executing program 5 (id=3434): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x40000c0) 1.303226435s ago: executing program 5 (id=3435): socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\n'], 0xa) 1.131801285s ago: executing program 7 (id=3436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 167.191851ms ago: executing program 6 (id=3437): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa140007"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 149.508901ms ago: executing program 5 (id=3438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007104"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000050008"], 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 139.439592ms ago: executing program 8 (id=3439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 91.720945ms ago: executing program 3 (id=3440): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 12.225449ms ago: executing program 6 (id=3441): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB="010026bd70", @ANYRES32=r3], 0x1c}}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/220, 0xdc}], 0x1}, 0x3}], 0x1, 0x0, 0x0) write$nci(r0, 0x0, 0x16) 883.91µs ago: executing program 7 (id=3442): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7020000020000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=3443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0x825}], 0x1, 0x0, 0x0, 0xc0}, 0x804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 2.2306'. [ 528.634707][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.020996][ T5382] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 529.023246][ T5382] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.034809][ T4785] wlan0: Trigger new scan to find an IBSS to join [ 529.336376][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'. [ 529.419005][T11885] device syzkaller0 entered promiscuous mode [ 530.257390][ T5382] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.289658][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 530.830673][ T3898] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 530.832564][ T3898] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.506819][T11939] binder: 11934:11939 got transaction to invalid handle, 1 [ 531.508213][T11939] binder: 11939:11934 cannot find target node [ 531.509228][T11939] binder: 11934:11939 transaction call to 0:0 failed 272/29201/-22, size 112-24 line 3045 [ 531.513618][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.515748][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.747777][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 532.074802][ T6138] wlan0: Trigger new scan to find an IBSS to join [ 532.903576][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.905498][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.988371][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 533.389758][ T5382] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 533.391700][ T5382] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 534.024338][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.026068][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.326510][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 534.616211][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 535.114855][ T4662] wlan0: Trigger new scan to find an IBSS to join [ 535.577817][ T5382] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 535.786469][ T5382] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.874090][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 535.882392][T12031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2372'. [ 535.890697][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.892082][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.997384][T12035] binder: 12025:12035 got transaction to invalid handle, 1 [ 535.998792][T12035] binder: 12035:12025 cannot find target node [ 535.999953][T12035] binder: 12025:12035 transaction call to 0:0 failed 275/29201/-22, size 112-24 line 3045 [ 536.004311][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.006462][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.154756][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.444851][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.116028][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2385'. [ 538.632957][ T3898] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 538.637765][ T3898] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.836303][ T5382] binder: undelivered TRANSACTION_ERROR: 29201 [ 540.323820][T12110] device syzkaller0 entered promiscuous mode [ 540.339061][T12111] binder: 12104:12111 got transaction to invalid handle, 1 [ 540.340472][T12111] binder: 12111:12104 cannot find target node [ 540.341618][T12111] binder: 12104:12111 transaction call to 0:0 failed 278/29201/-22, size 112-24 line 3045 [ 540.346216][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.348269][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.089006][ T3898] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 541.094201][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 541.132815][ T3898] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.144988][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.147047][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.501052][T12134] device syzkaller0 entered promiscuous mode [ 541.704975][T12138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2410'. [ 542.732748][T12156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2415'. [ 543.059829][ T5382] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 543.062635][ T5382] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 543.122356][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 543.184581][ T5382] binder: undelivered TRANSACTION_ERROR: 29201 [ 543.191025][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.194135][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.235272][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2426'. [ 544.857100][T12201] binder: 12196:12201 got transaction to invalid handle, 1 [ 544.858563][T12201] binder: 12201:12196 cannot find target node [ 544.859710][T12201] binder: 12196:12201 transaction call to 0:0 failed 281/29201/-22, size 112-24 line 3045 [ 544.864329][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.866451][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.100475][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 545.106533][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.108957][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.229587][ T3898] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 545.236891][ T3898] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.344399][T12207] device syzkaller0 entered promiscuous mode [ 545.575507][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2437'. [ 546.395188][ T1787] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.760303][T12254] device syzkaller0 entered promiscuous mode [ 546.984248][T12256] ALSA: mixer_oss: invalid OSS volume '2' [ 546.988316][T12256] ALSA: mixer_oss: invalid OSS volume '' [ 546.992971][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.994563][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.272546][ T5382] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 547.324907][ T5382] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 547.383526][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 547.397045][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.400436][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.565706][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2452'. [ 547.705963][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 547.861719][T12276] device ip6gre1 entered promiscuous mode [ 548.019690][T12281] device syzkaller0 entered promiscuous mode [ 548.633940][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2463'. [ 548.877350][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 548.942546][T12313] binder: 12301:12313 ioctl 4018620d 0 returned -22 [ 548.944409][T12313] binder: 12301:12313 Acquire 1 refcount change on invalid ref 0 ret -22 [ 548.946449][T12313] binder: 12301:12313 got transaction to invalid handle, 1 [ 548.947592][T12313] binder: 12313:12301 cannot find target node [ 548.948585][T12313] binder: 12301:12313 transaction call to 0:0 failed 282/29201/-22, size 112-24 line 3045 [ 548.952635][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.954709][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.246710][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.248309][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.537385][ T3898] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 549.539618][ T3898] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 549.560850][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2476'. [ 549.596623][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2476'. [ 550.786069][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 550.828768][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2487'. [ 550.930638][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2488'. [ 550.940253][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.942939][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.514717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.711101][ T5382] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 551.712883][ T5382] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 551.776001][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 551.799509][T12401] wireguard: wg1: Could not create IPv4 socket [ 551.849132][T12405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2495'. [ 551.893857][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'. [ 551.946340][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2498'. [ 552.033716][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 552.045400][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.047756][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.394765][ T27] audit: type=1326 audit(552.380:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12420 comm="syz.1.2503" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90175928 code=0x0 [ 552.665985][T12433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2505'. [ 552.671407][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.672659][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.843692][T12437] binder: 12434:12437 ioctl 4018620d 0 returned -22 [ 552.845538][T12437] binder: 12434:12437 Acquire 1 refcount change on invalid ref 0 ret -22 [ 552.847439][T12437] binder: 12434:12437 got transaction to invalid handle, 1 [ 552.848631][T12437] binder: 12437:12434 cannot find target node [ 552.849695][T12437] binder: 12434:12437 transaction call to 0:0 failed 283/29201/-22, size 112-24 line 3045 [ 552.854050][T12437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.856031][T12437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.388655][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.390493][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.469806][ T4439] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 553.471714][ T4439] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.951785][T12476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 553.956008][T12476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.957499][T12476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.668221][T12511] __nla_validate_parse: 5 callbacks suppressed [ 554.668230][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 554.675290][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.677851][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.949261][T12522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 554.951867][T12522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.953265][T12522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.545526][T12528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2538'. [ 555.686563][ T5382] binder: undelivered TRANSACTION_ERROR: 29201 [ 555.880881][T12550] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 555.899924][T12550] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 555.904156][T12550] device macvlan2 entered promiscuous mode [ 555.911307][T12550] device bond1 entered promiscuous mode [ 555.912295][T12550] device gretap1 entered promiscuous mode [ 555.913409][T12550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.940394][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.944197][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.950289][T12550] device bond1 left promiscuous mode [ 555.951241][T12550] device gretap1 left promiscuous mode [ 555.973919][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.977076][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.996750][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.997925][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.117382][T12558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'. [ 556.145628][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2548'. [ 556.202817][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.206068][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.555723][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2550'. [ 556.951841][T12581] binder: 12574:12581 ioctl 4018620d 0 returned -22 [ 556.953685][T12581] binder: 12574:12581 Acquire 1 refcount change on invalid ref 0 ret -22 [ 556.955756][T12581] binder: 12574:12581 got transaction to invalid handle, 1 [ 556.957081][T12581] binder: 12581:12574 cannot find target node [ 556.958145][T12581] binder: 12574:12581 transaction call to 0:0 failed 284/29201/-22, size 112-24 line 3045 [ 557.304962][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.354604][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.588809][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2561'. [ 557.618502][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2562'. [ 557.622978][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.625064][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.969841][T12631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2569'. [ 559.158623][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2573'. [ 559.800778][ T4516] binder: undelivered TRANSACTION_ERROR: 29201 [ 560.029769][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 560.084103][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.086324][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.830693][T12665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 560.833306][T12665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.837791][T12665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.879279][ T4516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.954988][ T4516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.170702][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2584'. [ 561.353349][T12687] binder: 12685:12687 unknown command 0 [ 561.354511][T12687] binder: 12685:12687 ioctl c0306201 20000080 returned -22 [ 561.362560][T12687] binder: 12685:12687 tried to acquire reference to desc 0, got 1 instead [ 561.367421][T12687] binder: 12687:12685 failed to get security context [ 561.368813][T12687] binder: 12685:12687 transaction async to 12685:0 failed 289/29201/-22, size 0-0 line 3197 [ 561.370938][ T4516] binder: undelivered TRANSACTION_ERROR: 29201 [ 561.467849][T12690] binder: 12683:12690 ioctl c0306201 0 returned -14 [ 561.469618][T12690] binder: 12683:12690 got transaction to invalid handle, 1 [ 561.470972][T12690] binder: 12690:12683 cannot find target node [ 561.472097][T12690] binder: 12683:12690 transaction call to 0:0 failed 291/29201/-22, size 112-24 line 3045 [ 561.477001][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.479111][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.946089][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 562.003391][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.006180][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.042754][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 562.472733][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 563.652509][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 563.742603][T12741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 564.277054][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 564.290960][ T4516] binder: undelivered TRANSACTION_ERROR: 29201 [ 564.304835][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.307397][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.713510][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2615'. [ 564.759814][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2616'. [ 564.940815][T12786] device syzkaller0 entered promiscuous mode [ 565.135144][T12790] binder: 12787:12790 ioctl c0306201 0 returned -14 [ 565.136853][T12790] binder: 12787:12790 got transaction to invalid handle, 1 [ 565.138049][T12790] binder: 12790:12787 cannot find target node [ 565.139185][T12790] binder: 12787:12790 transaction call to 0:0 failed 293/29201/-22, size 112-24 line 3045 [ 565.144303][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.146442][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.561583][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2627'. [ 565.640568][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 565.703833][T12817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.705575][T12817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.759491][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.764601][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.858343][T12815] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.322981][T12827] device syzkaller0 entered promiscuous mode [ 566.803977][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.809099][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.384341][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2640'. [ 567.982060][ T4439] binder: undelivered TRANSACTION_ERROR: 29201 [ 568.000820][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 568.009502][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.012258][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.245084][T12860] device syzkaller0 entered promiscuous mode [ 568.732175][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'. [ 568.840901][T12885] binder: 12875:12885 ioctl c0306201 0 returned -14 [ 568.842562][T12885] binder: 12875:12885 got transaction to invalid handle, 1 [ 568.843680][T12885] binder: 12885:12875 cannot find target node [ 568.844724][T12885] binder: 12875:12885 transaction call to 0:0 failed 295/29201/-22, size 112-24 line 3045 [ 568.849206][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.851202][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.138780][T12889] device syzkaller0 entered promiscuous mode [ 569.407404][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 569.417414][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.423457][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.908932][T12926] /dev/nullb0: Can't open blockdev [ 570.010509][T12934] device syzkaller0 entered promiscuous mode [ 570.771667][T12962] device batadv_slave_1 entered promiscuous mode [ 570.805711][T12961] device batadv_slave_1 left promiscuous mode [ 571.119270][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2678'. [ 571.131120][T12983] device syzkaller0 entered promiscuous mode [ 571.135225][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.138669][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.436015][T12988] /dev/nullb0: Can't open blockdev [ 571.601457][T12992] syz.0.2683 (12992) used obsolete PPPIOCDETACH ioctl [ 571.667045][ T4516] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.809765][T13007] device syzkaller0 entered promiscuous mode [ 571.812928][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.816924][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.631092][T13032] binder: 13023:13032 got transaction to invalid handle, 1 [ 572.632414][T13032] binder: 13032:13023 cannot find target node [ 572.633443][T13032] binder: 13023:13032 transaction call to 0:0 failed 297/29201/-22, size 112-24 line 3045 [ 572.637814][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.639831][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.924296][T13040] device syzkaller0 entered promiscuous mode [ 572.933190][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 573.053813][T13051] tipc: Enabled bearer , priority 0 [ 573.056376][T13051] device syzkaller0 entered promiscuous mode [ 573.145309][T13052] netlink: 'syz.2.2708': attribute type 13 has an invalid length. [ 573.342880][T13052] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.344336][T13052] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.345784][T13052] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.347148][T13052] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.994026][T13050] tipc: Resetting bearer [ 574.096671][T13050] tipc: Disabling bearer [ 574.099834][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 574.213544][T13080] device syzkaller0 entered promiscuous mode [ 574.664690][T13088] device ip6gre2 entered promiscuous mode [ 574.759392][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2727'. [ 575.373650][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2732'. [ 575.468788][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.847834][T13136] device syzkaller0 entered promiscuous mode [ 576.980140][T13138] device ip6gre2 entered promiscuous mode [ 577.389175][T13155] binder: 13150:13155 got transaction to invalid handle, 1 [ 577.390260][T13155] binder: 13155:13150 cannot find target node [ 577.391232][T13155] binder: 13150:13155 transaction call to 0:0 failed 298/29201/-22, size 112-24 line 3045 [ 577.393427][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.394894][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.064574][ T4325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.066940][ T4325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.069069][ T4325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.071309][ T4325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.072768][ T4325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 578.075480][ T4325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 578.079446][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.080866][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.082240][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.090828][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.092408][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 578.093765][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 578.470687][T13165] chnl_net:caif_netlink_parms(): no params data found [ 578.490412][T13165] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.491769][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.493494][T13165] device bridge_slave_0 entered promiscuous mode [ 578.496517][T13165] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.497945][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.499680][T13165] device bridge_slave_1 entered promiscuous mode [ 578.508730][T13165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.511753][T13165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.523161][T13165] team0: Port device team_slave_0 added [ 578.529020][T13165] team0: Port device team_slave_1 added [ 578.536010][T13165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.537340][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.543371][T13165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.551459][T13165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.552959][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.557410][T13165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.609907][T13165] device hsr_slave_0 entered promiscuous mode [ 578.646011][T13165] device hsr_slave_1 entered promiscuous mode [ 578.684831][T13165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.687069][T13165] Cannot create hsr debugfs directory [ 579.230579][T13188] device syzkaller0 entered promiscuous mode [ 579.993998][T13165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 580.027328][T13165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 580.065956][T13165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 580.087893][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.106445][T13165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 580.154825][ T4325] Bluetooth: hci5: command 0x0409 tx timeout [ 580.180004][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2759'. [ 580.263031][T13165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.308684][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.310259][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.318722][T13165] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.328769][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.330498][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.331957][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.334211][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.387128][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 580.708891][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 580.710540][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.712246][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.713270][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.724858][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 580.734214][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.739692][T13224] device syzkaller0 entered promiscuous mode [ 580.744196][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.747093][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.750085][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 580.810895][T13165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.812575][T13165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.825441][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.827212][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 580.828781][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 580.830341][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 580.831951][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 580.833401][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 580.845329][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 580.859851][ T27] audit: type=1326 audit(580.850:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13221 comm="syz.4.2763" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93375928 code=0x0 [ 580.959332][T13165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.968752][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.970182][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 580.984134][T13165] device veth0_vlan entered promiscuous mode [ 581.005194][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 581.006945][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 581.008384][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 581.009874][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 581.013177][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.019372][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 581.023626][T13165] device veth1_vlan entered promiscuous mode [ 581.040845][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 581.042296][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 581.043730][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.046198][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.049404][T13165] device veth0_macvtap entered promiscuous mode [ 581.051998][T13165] device veth1_macvtap entered promiscuous mode [ 581.069060][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.070654][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.072077][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.073670][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.076849][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.078536][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.080929][T13165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.082365][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.083856][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.088577][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.090141][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.095663][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.097424][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.098906][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.100693][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.102182][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.103752][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.114645][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.116684][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.131601][T13165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.132900][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.134512][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.138414][T13165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.139817][T13165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.141331][T13165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.142920][T13165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.335156][T13244] binder: 13239:13244 got transaction to invalid handle, 1 [ 581.336358][T13244] binder: 13244:13239 cannot find target node [ 581.337370][T13244] binder: 13239:13244 transaction call to 0:0 failed 301/29201/-22, size 112-24 line 3045 [ 581.341369][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.343322][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.592942][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.598442][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.607533][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 581.614455][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.616175][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.619448][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 582.117651][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 582.234771][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 582.236972][ T4325] Bluetooth: hci5: command 0x041b tx timeout [ 582.480936][T13275] device syzkaller0 entered promiscuous mode [ 584.166410][ T5183] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.315120][ T4325] Bluetooth: hci5: command 0x040f tx timeout [ 584.505136][T13321] device syzkaller0 entered promiscuous mode [ 584.640827][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.642596][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.337820][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 585.666642][T13367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2803'. [ 585.763313][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.767070][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.769017][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.772656][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.774437][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 585.776020][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.895852][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 585.951249][T13371] chnl_net:caif_netlink_parms(): no params data found [ 585.979824][T13371] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.979892][T13371] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.980372][T13371] device bridge_slave_0 entered promiscuous mode [ 585.990838][T13371] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.990877][T13371] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.991252][T13371] device bridge_slave_1 entered promiscuous mode [ 586.001943][T13371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.003333][T13371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.028238][T13371] team0: Port device team_slave_0 added [ 586.031172][T13371] team0: Port device team_slave_1 added [ 586.038423][T13371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.039826][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.051704][T13371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.054475][T13371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.056082][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.060778][T13371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.096706][T13371] device hsr_slave_0 entered promiscuous mode [ 586.125117][T13371] device hsr_slave_1 entered promiscuous mode [ 586.180951][T13371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.182316][T13371] Cannot create hsr debugfs directory [ 586.202362][T13395] device syzkaller0 entered promiscuous mode [ 586.395056][ T4331] Bluetooth: hci5: command 0x0419 tx timeout [ 587.834688][ T4325] Bluetooth: hci2: command 0x0409 tx timeout [ 589.914718][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 591.994677][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 594.075446][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 597.036133][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 597.198322][T13371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.317019][T13371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.411179][T13371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.517138][T13371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.669563][T13443] device syzkaller0 entered promiscuous mode [ 598.743318][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.746844][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.268792][T13467] Cannot find add_set index 0 as target [ 601.313704][T13477] libceph: resolve ' [ 601.313704][T13477] -&fYǝa2i [ 601.313704][T13477] .?&*&' (ret=-3): failed [ 608.631840][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 608.655225][T13371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 608.707184][T13371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 608.743271][T13371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 608.777010][T13371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 608.851592][T13503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.853737][T13503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.862121][T13503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.929039][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2849'. [ 608.948079][ T4516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.973119][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.978627][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.980192][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.984350][T13371] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.988272][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.990054][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.009414][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.010665][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.031971][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.033945][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.036367][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.037806][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.038979][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.041169][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.042929][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 609.053838][T13371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.057165][T13371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.059704][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 609.063132][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 609.068672][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.070477][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.072061][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.073642][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.077317][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.079093][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.083797][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 609.088641][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 609.179657][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.181144][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.195603][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.364797][ T4516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.393833][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 609.396236][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.431351][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 609.433753][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.437929][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.439343][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.443112][T13371] device veth0_vlan entered promiscuous mode [ 609.453451][T13371] device veth1_vlan entered promiscuous mode [ 609.473297][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.475426][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 609.478145][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.479810][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.486692][T13371] device veth0_macvtap entered promiscuous mode [ 609.491738][T13371] device veth1_macvtap entered promiscuous mode [ 609.528328][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.533621][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.536796][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.549173][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.552942][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.560062][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.565011][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.567629][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.571360][T13371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.577385][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 609.579122][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 609.581818][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.588966][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.612701][T13534] device syzkaller0 entered promiscuous mode [ 609.683291][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.685073][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.686507][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.688305][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.690971][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.703630][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.705661][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.707368][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.709029][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.710822][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.714561][T13371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.716292][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.718097][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.435855][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.436992][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.975461][T13371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.976985][T13371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.978419][T13371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.979804][T13371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.077680][T13552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.080779][T13552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.082039][T13552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.119312][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2861'. [ 621.137139][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.138647][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.141747][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.169437][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.170954][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.175912][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.013860][T13582] device syzkaller0 entered promiscuous mode [ 622.554715][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 633.061408][T13593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.080076][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2876'. [ 633.163802][T13605] device syzkaller0 entered promiscuous mode [ 643.044696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.429044][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.431445][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.433381][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.435602][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.436985][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 648.438821][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.458145][ T4331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 649.460140][ T4331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 649.463184][ T4331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 649.467181][ T4331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.468660][ T4331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 649.469936][ T4331] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 649.481747][T10042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 649.484604][T10042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 649.491183][ T4331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 649.493244][T10042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 649.504543][T10042] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 649.506371][T10042] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 649.533318][ T4325] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 649.535960][ T4325] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 649.537612][ T4325] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 649.539060][ T4325] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 649.540434][ T4325] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 649.543019][ T4325] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 650.484755][T10042] Bluetooth: hci3: command 0x0409 tx timeout [ 651.514744][T10042] Bluetooth: hci7: command 0x0409 tx timeout [ 651.514821][ T4325] Bluetooth: hci6: command 0x0409 tx timeout [ 651.594680][ T4325] Bluetooth: hci8: command 0x0409 tx timeout [ 652.554703][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 653.594677][ T4325] Bluetooth: hci6: command 0x041b tx timeout [ 653.604712][ T4325] Bluetooth: hci7: command 0x041b tx timeout [ 653.684718][ T4325] Bluetooth: hci8: command 0x041b tx timeout [ 654.644670][ T4325] Bluetooth: hci3: command 0x040f tx timeout [ 655.217879][T13641] netlink: 'syz.2.2891': attribute type 5 has an invalid length. [ 655.230774][T13658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.232892][T13658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.234191][T13658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.252708][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2893'. [ 655.612145][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.613737][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.684698][ T4325] Bluetooth: hci7: command 0x040f tx timeout [ 655.685711][ T4325] Bluetooth: hci6: command 0x040f tx timeout [ 655.754784][T10016] Bluetooth: hci8: command 0x040f tx timeout [ 656.066154][T13680] chnl_net:caif_netlink_parms(): no params data found [ 656.117923][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.123237][T13667] chnl_net:caif_netlink_parms(): no params data found [ 656.136228][T13675] chnl_net:caif_netlink_parms(): no params data found [ 656.217856][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.233555][T13680] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.237360][T13680] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.238869][T13680] device bridge_slave_0 entered promiscuous mode [ 656.248434][T13674] chnl_net:caif_netlink_parms(): no params data found [ 656.269761][T13680] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.270965][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.275071][T13680] device bridge_slave_1 entered promiscuous mode [ 656.291525][T13667] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.292740][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.294400][T13667] device bridge_slave_0 entered promiscuous mode [ 656.296959][T13667] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.298136][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.299574][T13667] device bridge_slave_1 entered promiscuous mode [ 656.346945][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.358477][T13680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.361209][T13680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.388524][T13675] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.393118][T13675] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.399077][T13675] device bridge_slave_0 entered promiscuous mode [ 656.410015][T13667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.419067][T13680] team0: Port device team_slave_0 added [ 656.456049][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.458783][T13675] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.459956][T13675] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.461550][T13675] device bridge_slave_1 entered promiscuous mode [ 656.463987][T13667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.469302][T13680] team0: Port device team_slave_1 added [ 656.470470][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.471662][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.473143][T13674] device bridge_slave_0 entered promiscuous mode [ 656.481899][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.483057][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.484860][T13674] device bridge_slave_1 entered promiscuous mode [ 656.511923][T13667] team0: Port device team_slave_0 added [ 656.513347][T13680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.519781][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.523857][T13680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.528175][T13680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.529342][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.533458][T13680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.545355][T13675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.547842][T13667] team0: Port device team_slave_1 added [ 656.553106][T13674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.561811][T13675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.568645][T13667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.569777][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.573720][T13667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.583472][T13674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.587955][T13667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.589043][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.592696][T13667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.636086][T13667] device hsr_slave_0 entered promiscuous mode [ 656.675274][T13667] device hsr_slave_1 entered promiscuous mode [ 656.714678][T13667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.715967][T13667] Cannot create hsr debugfs directory [ 656.724416][T13675] team0: Port device team_slave_0 added [ 656.725604][ T4325] Bluetooth: hci3: command 0x0419 tx timeout [ 656.728606][T13675] team0: Port device team_slave_1 added [ 656.744004][T13674] team0: Port device team_slave_0 added [ 656.762358][T13675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.763507][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.769241][T13675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.795915][T13680] device hsr_slave_0 entered promiscuous mode [ 656.835028][T13680] device hsr_slave_1 entered promiscuous mode [ 656.874819][T13680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.876033][T13680] Cannot create hsr debugfs directory [ 656.879742][T13674] team0: Port device team_slave_1 added [ 656.885715][T13675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.886808][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.890787][T13675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.897398][T13674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.898504][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.902754][T13674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.926074][T13674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.927357][T13674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.931331][T13674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.006161][T13675] device hsr_slave_0 entered promiscuous mode [ 657.075060][T13675] device hsr_slave_1 entered promiscuous mode [ 657.106188][T13675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.107507][T13675] Cannot create hsr debugfs directory [ 657.314205][T13750] netlink: 'syz.3.2904': attribute type 10 has an invalid length. [ 657.323882][T13750] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 657.411845][T13674] device hsr_slave_0 entered promiscuous mode [ 657.505212][T13674] device hsr_slave_1 entered promiscuous mode [ 657.754752][ T4325] Bluetooth: hci6: command 0x0419 tx timeout [ 657.755755][ T4325] Bluetooth: hci7: command 0x0419 tx timeout [ 657.834648][T10016] Bluetooth: hci8: command 0x0419 tx timeout [ 657.845336][T13674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.846611][T13674] Cannot create hsr debugfs directory [ 658.242815][T13757] netlink: 'syz.3.2907': attribute type 29 has an invalid length. [ 658.295768][T13757] netlink: 'syz.3.2907': attribute type 29 has an invalid length. [ 658.304122][T13757] netlink: 'syz.3.2907': attribute type 29 has an invalid length. [ 658.428843][T13667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.529318][T13773] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2909'. [ 658.532630][T13667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.576126][T13667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.607521][T13667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.894111][T13680] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 658.943958][T13680] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.074828][T13680] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.102877][T13680] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.247374][T13675] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.357924][T13675] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 659.395991][T13675] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 659.431745][T13778] Set syz1 is full, maxelem 65536 reached [ 659.440351][T13667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.535103][T13675] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 659.594300][T13667] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.927298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.928948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.930277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.931720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.933036][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.934173][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.935727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.937679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.939110][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.940280][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.941711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.943427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.945239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.946894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.952183][T13667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.953775][T13667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.999437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 660.001123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.002670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.004411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.015924][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.017743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.019323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.021128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 660.023869][T13674] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.056214][T13674] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 660.096300][T13674] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 660.135955][T13674] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 660.460326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.580380][ T59] device hsr_slave_0 left promiscuous mode [ 660.617612][ T59] device hsr_slave_1 left promiscuous mode [ 660.675193][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.676531][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.679072][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.680328][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.681831][ T59] device bridge_slave_1 left promiscuous mode [ 660.684264][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.716702][ T59] device bridge_slave_0 left promiscuous mode [ 660.717883][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.836158][ T59] device veth1_macvtap left promiscuous mode [ 660.837392][ T59] device veth0_macvtap left promiscuous mode [ 660.838267][ T59] device veth1_vlan left promiscuous mode [ 660.839344][ T59] device veth0_vlan left promiscuous mode [ 662.958296][ T59] team0 (unregistering): Port device team_slave_1 removed [ 663.126805][ T59] team0 (unregistering): Port device team_slave_0 removed [ 663.286176][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.506216][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.080704][ T59] bond0 (unregistering): Released all slaves [ 665.435715][T13675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.454146][T13680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.491548][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.493272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.503196][T13675] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.529269][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.530957][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.535320][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.537069][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.538478][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.539638][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.543465][T13680] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.565022][T13875] netlink: 'syz.3.2925': attribute type 13 has an invalid length. [ 666.086517][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.107601][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.382300][T13875] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.383787][T13875] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.385229][T13875] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.386558][T13875] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.541675][T13875] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.543068][T13875] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.544360][T13875] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.545839][T13875] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.678511][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.680255][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.681790][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.683366][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.684454][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.687315][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.688534][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.689797][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.691508][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.693019][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.694121][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.699913][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.702514][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.703908][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.704988][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.709440][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.711043][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.712662][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.714529][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.719515][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.721193][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.722661][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.724114][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.741412][T13680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.743321][T13680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.757615][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.759304][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 666.760777][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.762391][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.764038][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.773139][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.785104][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 666.791721][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.801970][T13667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.811821][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 666.813432][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.825942][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.830654][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.832273][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.843638][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 666.849132][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.877176][T13675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.933419][T13674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.945312][T13674] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.948182][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.949685][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.966354][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.967674][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.980485][T13680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.991446][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.993122][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.994492][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.995666][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.003529][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.009803][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.011498][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.025575][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.026771][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.031536][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.082900][T13674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.084510][T13674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.103807][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.106788][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.109085][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.110811][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.112402][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.113890][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.125768][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.132570][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.134224][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.139809][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.141668][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.153019][T13675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.157420][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.158774][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.210355][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.212156][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.214088][T13932] netlink: 'syz.3.2932': attribute type 13 has an invalid length. [ 667.222599][T13667] device veth0_vlan entered promiscuous mode [ 667.246442][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.253222][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.266550][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.268292][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.276276][T13667] device veth1_vlan entered promiscuous mode [ 667.318826][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.320474][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.321863][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.323539][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.349319][T13667] device veth0_macvtap entered promiscuous mode [ 667.351920][T13667] device veth1_macvtap entered promiscuous mode [ 667.911344][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.913056][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.916347][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.918041][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.919578][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.921141][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.933550][T13667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.935178][T13948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2933'. [ 667.937683][T13948] device ip6gre2 entered promiscuous mode [ 667.951450][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.955580][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.957324][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.967595][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 667.971599][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.975747][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.977198][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.036993][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.046916][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.048689][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.070457][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.072327][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.117563][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.122811][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.124406][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.131551][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.133072][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.136664][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.138193][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.139885][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.142696][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.150395][T13667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.152608][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.154393][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.206925][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.211019][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.212642][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.214173][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.215906][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.217702][T13675] device veth0_vlan entered promiscuous mode [ 668.221308][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.222950][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.224405][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.225995][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.228935][T13680] device veth0_vlan entered promiscuous mode [ 668.232464][T13680] device veth1_vlan entered promiscuous mode [ 668.252290][T13667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.253725][T13667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.260086][T13667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.261677][T13667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.263882][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.265708][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.267441][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.280535][T13675] device veth1_vlan entered promiscuous mode [ 668.328726][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.334330][T13680] device veth0_macvtap entered promiscuous mode [ 668.341512][T13680] device veth1_macvtap entered promiscuous mode [ 668.344281][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.347319][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.352118][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.356574][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.359766][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.361446][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.382600][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.384172][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.386571][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.393143][T13675] device veth0_macvtap entered promiscuous mode [ 668.423868][T13675] device veth1_macvtap entered promiscuous mode [ 668.428190][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.429784][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.431250][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.432696][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.453831][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.455769][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.462300][T13674] device veth0_vlan entered promiscuous mode [ 668.465395][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.467440][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.469365][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.471169][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.473045][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.480702][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.482390][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.484098][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.487573][T13680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.503765][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.505792][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.515439][T13674] device veth1_vlan entered promiscuous mode [ 668.524910][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.526315][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.547954][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.553260][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.559009][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.560664][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.562239][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.563908][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.566048][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.567885][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.569575][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.571192][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.573670][T13680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.575813][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.577539][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.579005][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.580577][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.627827][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.629661][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.633128][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.635764][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.637407][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.639010][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.640569][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.642207][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.644014][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.645852][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.647343][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.649018][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.651436][T13675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.661501][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.663766][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.666150][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.696635][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.698286][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.711857][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.713552][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.715498][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.717173][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.718651][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.720162][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.721603][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.723201][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.725424][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.727035][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.728538][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.730165][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.732552][T13675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.733836][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.735971][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.742830][T13680] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.744318][T13680] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.750738][T13680] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.752150][T13680] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.773327][T13674] device veth0_macvtap entered promiscuous mode [ 668.778694][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.780229][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.786322][T13675] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.787876][T13675] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.789200][T13675] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.790435][T13675] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.828800][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.830548][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.833678][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.835521][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.836986][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.839743][T13674] device veth1_macvtap entered promiscuous mode [ 668.850447][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.852331][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.853962][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.856577][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.858283][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.860311][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.861932][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.863594][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.865788][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.867487][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.869065][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.870664][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.873396][T13674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.878981][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.880867][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.885748][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.887593][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.889152][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.891718][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.893497][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.895728][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.897249][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.898882][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.900449][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.902095][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.903615][T13674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.905487][T13674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.908333][T13674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.917107][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.918828][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.920231][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.921613][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.923072][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.924602][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.975955][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.977577][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.023939][T13674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.026185][T13674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.027532][T13674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.028931][T13674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.185262][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.186626][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.192869][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.195943][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.203492][T14007] tipc: Enabling of bearer rejected, failed to enable media [ 669.221113][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.222838][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.294573][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.296692][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.300474][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.333667][ T4657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.336582][ T4657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.347471][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.349105][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.374943][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.376538][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.379138][T14020] netlink: 13676 bytes leftover after parsing attributes in process `syz.3.2941'. [ 669.447546][ T4657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.450648][ T4657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.454056][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.587770][ T59] tipc: Left network mode [ 669.832269][T14051] tipc: Enabling of bearer rejected, failed to enable media [ 670.359284][T14056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 670.361644][T14056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.362901][T14056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 670.391266][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2950'. [ 670.467460][T14098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 670.874873][T14098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 670.884043][T14099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 670.894801][T14103] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2964'. [ 670.896402][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2960'. [ 670.899592][T14101] device ip6gre1 entered promiscuous mode [ 670.906164][T14104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 670.957220][T14113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2965'. [ 671.241322][T14137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 671.247875][T14137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.258062][T14137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.962956][T14203] __nla_validate_parse: 5 callbacks suppressed [ 672.962969][T14203] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2988'. [ 673.220854][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2994'. [ 673.230820][T14228] device ip6gre1 entered promiscuous mode [ 673.580871][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 673.583395][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.585809][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.677598][T14240] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2998'. [ 674.029092][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3000'. [ 674.064724][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3001'. [ 674.089706][T14270] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3003'. [ 674.523211][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 674.529765][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.531092][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.544802][T14301] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3010'. [ 674.890044][T14316] device syzkaller0 entered promiscuous mode [ 674.892109][T14331] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3017'. [ 675.065294][ T59] device hsr_slave_0 left promiscuous mode [ 675.086018][ T59] device hsr_slave_1 left promiscuous mode [ 675.145699][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.146940][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.148489][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.149656][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.151226][ T59] device bridge_slave_1 left promiscuous mode [ 675.152308][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.198223][ T59] device bridge_slave_0 left promiscuous mode [ 675.201778][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.238440][ T59] device hsr_slave_0 left promiscuous mode [ 675.269831][ T59] device hsr_slave_1 left promiscuous mode [ 675.354828][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.356892][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.358044][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.359647][ T59] device bridge_slave_1 left promiscuous mode [ 675.360631][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.405673][ T59] device bridge_slave_0 left promiscuous mode [ 675.408025][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.534853][ T59] device veth1_macvtap left promiscuous mode [ 675.535995][ T59] device veth0_macvtap left promiscuous mode [ 675.537073][ T59] device veth1_vlan left promiscuous mode [ 675.538778][ T59] device veth0_vlan left promiscuous mode [ 675.664816][ T59] device veth1_macvtap left promiscuous mode [ 675.665872][ T59] device veth0_macvtap left promiscuous mode [ 675.666823][ T59] device veth1_vlan left promiscuous mode [ 675.669106][ T59] device veth0_vlan left promiscuous mode [ 677.918018][ T59] team0 (unregistering): Port device team_slave_1 removed [ 678.096769][ T59] team0 (unregistering): Port device team_slave_0 removed [ 678.286425][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.496015][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.876678][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.877887][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.176215][ T59] bond0 (unregistering): Released all slaves [ 682.768080][ T59] team0 (unregistering): Port device team_slave_1 removed [ 682.957729][ T59] team0 (unregistering): Port device team_slave_0 removed [ 683.149298][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.360900][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.885792][ T59] bond0 (unregistering): Released all slaves [ 685.186064][T14359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 685.188437][T14359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.189740][T14359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.216409][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3024'. [ 685.261346][T14379] netlink: 'syz.3.3031': attribute type 13 has an invalid length. [ 685.292464][T14384] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3032'. [ 685.357191][T14386] tipc: Started in network mode [ 685.358115][T14386] tipc: Node identity aad383bcd1bc, cluster identity 4711 [ 685.359324][T14386] tipc: Enabled bearer , priority 0 [ 685.382459][T14386] device syzkaller0 entered promiscuous mode [ 685.494395][T14386] tipc: Resetting bearer [ 685.498942][T14401] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3037'. [ 685.509286][T14385] tipc: Resetting bearer [ 685.596321][T14385] tipc: Disabling bearer [ 685.598642][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3039'. [ 685.649101][T14417] device syzkaller0 entered promiscuous mode [ 685.718635][T14417] tipc: Started in network mode [ 685.719507][T14417] tipc: Node identity 6e9d71ea718a, cluster identity 4711 [ 685.749532][T14417] tipc: Enabled bearer , priority 0 [ 685.750857][T14423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3043'. [ 685.754507][T14416] tipc: Resetting bearer [ 685.850487][T14416] tipc: Disabling bearer [ 685.857763][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3045'. [ 685.925241][T14435] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3046'. [ 686.109377][T14448] device ip6gre2 entered promiscuous mode [ 686.399966][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 686.628431][T14481] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3059'. [ 687.057061][T14504] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3061'. [ 687.422871][T10016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.428453][T10016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.436927][T10016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.440300][T10016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.441728][T10016] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 687.443978][T10016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.498485][T14528] device ip6gre2 entered promiscuous mode [ 687.581845][ T4324] bond0: (slave syz_tun): Releasing backup interface [ 687.884088][T14529] chnl_net:caif_netlink_parms(): no params data found [ 687.897462][T14545] device syzkaller0 entered promiscuous mode [ 689.514816][ T4325] Bluetooth: hci0: command 0x0409 tx timeout [ 691.594696][ T4325] Bluetooth: hci0: command 0x041b tx timeout [ 693.684669][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 695.764745][T10042] Bluetooth: hci0: command 0x0419 tx timeout [ 698.988284][T14576] netlink: 'syz.5.3076': attribute type 13 has an invalid length. [ 699.093508][T14576] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.094934][T14576] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.470137][T14576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.486164][T14576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.793833][T14576] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.795526][T14576] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.796977][T14576] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.798328][T14576] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.060880][T14584] __nla_validate_parse: 6 callbacks suppressed [ 700.060900][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3078'. [ 700.118404][T14529] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.119662][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.121294][T14529] device bridge_slave_0 entered promiscuous mode [ 700.145850][T14529] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.146975][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.148563][T14529] device bridge_slave_1 entered promiscuous mode [ 700.159845][T14595] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3081'. [ 700.179077][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.196761][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.274094][T14604] netlink: 'syz.7.3085': attribute type 15 has an invalid length. [ 700.302298][T14529] team0: Port device team_slave_0 added [ 700.305344][T14529] team0: Port device team_slave_1 added [ 700.355841][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.357129][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.368750][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.377712][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3087'. [ 700.381054][T14616] device macsec0 entered promiscuous mode [ 700.382279][T14616] device macsec1 entered promiscuous mode [ 700.387866][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.389153][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.407339][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.486710][T14529] device hsr_slave_0 entered promiscuous mode [ 700.525063][T14529] device hsr_slave_1 entered promiscuous mode [ 700.579974][ T39] tipc: Left network mode [ 700.991157][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 700.995886][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 701.003264][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 701.005313][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 701.069778][T14640] infiniband syz1: set down [ 701.070704][T14640] infiniband syz1: added xfrm0 [ 701.109572][T13887] xfrm0 speed is unknown, defaulting to 1000 [ 701.208877][T14640] RDS/IB: syz1: added [ 701.212543][T14640] smc: adding ib device syz1 with port count 1 [ 701.215755][T14640] smc: ib device syz1 port 1 has pnetid [ 701.258640][T13887] xfrm0 speed is unknown, defaulting to 1000 [ 701.261764][T14663] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3095'. [ 701.269864][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 701.431522][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3098'. [ 701.877188][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 701.903584][T14593] udevd[14593]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 701.989513][T14687] device ip6gre3 entered promiscuous mode [ 701.993337][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.415892][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.518461][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.716967][ T39] bond1: (slave gretap1): Releasing backup interface [ 702.823192][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.879468][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.965824][T14529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 702.986408][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 702.995063][T14529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 703.039329][T14640] xfrm0 speed is unknown, defaulting to 1000 [ 703.039353][T14529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.142861][T14529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 703.634123][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.669736][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.671399][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.682980][T14529] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.706746][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 703.708392][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 703.709710][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.710838][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.712229][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.721566][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.723449][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.728540][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.729719][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.734410][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 703.744318][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 703.763618][ T39] device hsr_slave_0 left promiscuous mode [ 703.795758][ T39] device hsr_slave_1 left promiscuous mode [ 703.865854][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.869624][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.871124][ T39] device bridge_slave_1 left promiscuous mode [ 703.873624][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.915499][ T39] device bridge_slave_0 left promiscuous mode [ 703.916607][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.922889][T14780] rdma_rxe: already configured on xfrm0 [ 703.967220][ T39] bond1 (unregistering): Released all slaves [ 706.128383][ T39] team0 (unregistering): Port device team_slave_1 removed [ 706.305857][ T39] team0 (unregistering): Port device team_slave_0 removed [ 706.465640][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.686240][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.176658][ T39] bond0 (unregistering): Released all slaves [ 708.518231][T14790] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3119'. [ 708.533098][T14792] device ip6gre1 entered promiscuous mode [ 708.540583][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.542867][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.544301][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.563005][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.633254][T14529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 708.635006][T14529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.638749][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.640323][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.641880][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.643480][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.650629][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.652147][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.653591][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3123'. [ 708.660144][T14802] xfrm0 speed is unknown, defaulting to 1000 [ 708.857462][T14820] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 708.880459][T14820] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 708.889119][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.890478][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.891860][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.905188][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 708.907229][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 708.911257][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 708.912777][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 708.914242][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 708.925415][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 708.928401][T14529] device veth0_vlan entered promiscuous mode [ 708.957379][T14529] device veth1_vlan entered promiscuous mode [ 709.000224][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3131'. [ 709.009323][T14833] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3131'. [ 709.042012][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 709.043661][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 709.046400][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 709.050065][ T6138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 709.063735][T14529] device veth0_macvtap entered promiscuous mode [ 709.073932][T14529] device veth1_macvtap entered promiscuous mode [ 709.406619][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.408546][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.430675][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.432763][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.434294][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.440795][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.442329][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.443995][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.445558][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.447112][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.454173][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.469096][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 709.470861][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 709.472473][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 709.474191][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 709.522090][T14849] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3133'. [ 709.608341][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.613799][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.621142][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.625213][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.632607][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.640370][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.645603][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.665966][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.671142][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.679477][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.683100][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.704694][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 709.706502][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 709.743277][T14529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.753036][T14529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.758600][T14529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.760968][T14529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.873761][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.876511][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.880119][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 709.920644][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.922076][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.932046][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 710.182085][T14886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3141'. [ 710.192859][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3141'. [ 710.792977][T14935] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3154'. [ 710.810812][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3155'. [ 710.816931][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3155'. [ 713.337931][T15090] netlink: 'syz.7.3198': attribute type 6 has an invalid length. [ 713.353501][T15093] xfrm0 speed is unknown, defaulting to 1000 [ 713.452780][T15090] smc: net device hsr0 applied user defined pnetid SYZ2 [ 713.454301][T15090] smc: net device hsr0 erased user defined pnetid SYZ2 [ 713.820470][T15112] team0: Port device vlan2 added [ 714.028065][T15125] __nla_validate_parse: 23 callbacks suppressed [ 714.028077][T15125] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3210'. [ 714.130186][T15129] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3211'. [ 714.262343][T15137] tipc: Enabled bearer , priority 0 [ 714.265698][T15137] syzkaller0: MTU too low for tipc bearer [ 714.266758][T15137] tipc: Disabling bearer [ 714.422131][T15143] tipc: Enabled bearer , priority 0 [ 714.423831][T15143] device syzkaller0 entered promiscuous mode [ 714.430874][T15143] tipc: Resetting bearer [ 714.433197][T15142] tipc: Resetting bearer [ 714.496073][T15142] tipc: Disabling bearer [ 714.587753][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3222'. [ 714.930084][T15184] netlink: 'syz.8.3237': attribute type 11 has an invalid length. [ 715.006984][T15187] tipc: Enabled bearer , priority 0 [ 715.008843][T15187] device syzkaller0 entered promiscuous mode [ 715.024106][T15187] tipc: Resetting bearer [ 715.028709][T15185] tipc: Resetting bearer [ 715.058741][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3238'. [ 715.085763][T15185] tipc: Disabling bearer [ 715.156781][T15199] netlink: 'syz.7.3242': attribute type 25 has an invalid length. [ 715.158219][T15199] netlink: 'syz.7.3242': attribute type 7 has an invalid length. [ 715.159535][T15199] netlink: 'syz.7.3242': attribute type 1 has an invalid length. [ 715.161663][T15199] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3242'. [ 715.169778][T15202] device dummy0 entered promiscuous mode [ 715.177443][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.230472][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.334838][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.378563][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3250'. [ 715.460423][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3253'. [ 715.466824][T15224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 715.468993][T15224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.490882][T15224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 715.492982][T15224] device bridge_slave_0 left promiscuous mode [ 715.494014][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.546764][T15224] device bridge_slave_1 left promiscuous mode [ 715.547908][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.586716][T15224] bond0: (slave bond_slave_0): Releasing backup interface [ 715.628163][T15224] bond0: (slave bond_slave_1): Releasing backup interface [ 715.698616][T15224] team0: Port device team_slave_0 removed [ 715.705618][T15224] team0: Port device team_slave_1 removed [ 715.706951][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.708348][T15224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.710372][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.711578][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.724436][T15237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3258'. [ 715.728749][T15240] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3256'. [ 715.897737][T15260] tipc: Started in network mode [ 715.898667][T15260] tipc: Node identity cef806520f29, cluster identity 4711 [ 715.899836][T15260] tipc: Enabled bearer , priority 0 [ 715.902918][T15263] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3264'. [ 715.904530][T15249] device syzkaller0 entered promiscuous mode [ 715.911555][T15249] tipc: Resetting bearer [ 716.000597][T15248] tipc: Resetting bearer [ 716.065492][T15248] tipc: Disabling bearer [ 716.150506][T15273] device syzkaller0 entered promiscuous mode [ 717.360519][T15411] xfrm0 speed is unknown, defaulting to 1000 [ 717.645481][T15437] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 718.029521][T15474] sock: sock_timestamping_bind_phc: sock not bind to device [ 718.517398][T15504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 719.175435][T15540] __nla_validate_parse: 32 callbacks suppressed [ 719.175461][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3365'. [ 719.286292][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3371'. [ 719.309270][T15554] xfrm0 speed is unknown, defaulting to 1000 [ 719.417676][T15557] xfrm0 speed is unknown, defaulting to 1000 [ 719.431627][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 719.451553][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'. [ 719.526140][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 719.527855][T15573] xfrm0 speed is unknown, defaulting to 1000 [ 719.596036][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3383'. [ 719.622330][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3384'. [ 719.651320][T15586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3383'. [ 719.947820][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3392'. [ 720.039845][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3395'. [ 720.767573][T15674] netlink: 'syz.8.3409': attribute type 2 has an invalid length. [ 720.768987][T15674] netlink: 'syz.8.3409': attribute type 3 has an invalid length. [ 720.770150][T15674] netlink: 'syz.8.3409': attribute type 4 has an invalid length. [ 720.771332][T15674] netlink: 'syz.8.3409': attribute type 2 has an invalid length. [ 720.772765][T15674] netlink: 'syz.8.3409': attribute type 1 has an invalid length. [ 721.751688][T15745] netlink: 'syz.8.3432': attribute type 13 has an invalid length. [ 722.040388][T15745] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.041791][T15745] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.534100][T15745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.550631][T15745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.841777][T15745] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.843324][T15745] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.845001][T15745] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.846474][T15745] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.298162][T15769] BUG: MAX_LOCKDEP_CHAINS too low! [ 723.298999][T15769] turning off the locking correctness validator. [ 723.300006][T15769] CPU: 0 PID: 15769 Comm: syz.5.3438 Not tainted syzkaller #0 [ 723.301174][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 723.302758][T15769] Call trace: [ 723.303259][T15769] dump_backtrace+0x1c0/0x1ec [ 723.303973][T15769] show_stack+0x2c/0x3c [ 723.304636][T15769] __dump_stack+0x30/0x40 [ 723.305328][T15769] dump_stack_lvl+0xf4/0x15c [ 723.306046][T15769] dump_stack+0x1c/0x5c [ 723.306686][T15769] __lock_acquire+0x1864/0x6800 [ 723.307367][T15769] lock_acquire+0x20c/0x63c [ 723.308015][T15769] _raw_spin_lock_bh+0x54/0x6c [ 723.308687][T15769] dev_deactivate_many+0x85c/0xa84 [ 723.309460][T15769] __dev_close_many+0x248/0x3a0 [ 723.310215][T15769] dev_close_many+0x1e4/0x438 [ 723.310967][T15769] unregister_netdevice_many+0x3cc/0x177c [ 723.311890][T15769] unregister_netdevice_queue+0x2b0/0x304 [ 723.312752][T15769] __tun_detach+0xb04/0x1224 [ 723.313428][T15769] tun_chr_close+0x118/0x1f4 [ 723.314107][T15769] __fput+0x1bc/0x7b8 [ 723.314708][T15769] ____fput+0x20/0x30 [ 723.315305][T15769] task_work_run+0x1ec/0x278 [ 723.316008][T15769] do_notify_resume+0x1fa0/0x2aa4 [ 723.316731][T15769] el0_svc+0x98/0x128 [ 723.317339][T15769] el0t_64_sync_handler+0x84/0xf0 [ 723.318080][T15769] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.53 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.53" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255