last executing test programs: 1m38.265522115s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 1m23.865878589s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 1m13.920201363s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 1m12.807194531s ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 59.2312476s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 57.574154387s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 57.558481738s ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 45.64493629s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 43.122746593s ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 41.617771353s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 31.551756469s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 30.228744107s ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 27.101692475s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 16.938106009s ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 16.88188299s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 14.704780218s ago: executing program 4 (id=688): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 1.849120787s ago: executing program 0 (id=2188): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x64, 0x66, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {0xb, 0x10}, {0x8, 0x4}}, [{0x8, 0xb, 0x8000}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xe89}, {0x8, 0xb, 0xfffff001}, {0x8}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d0}, 0x8054) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="0201140001"], 0xdd12}], 0x1}, 0x44040) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xffff, 0x10, 0x2de37880, 0x4}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x9}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r6], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r4, 0x0, 0x417}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 1.745266102s ago: executing program 3 (id=2189): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) 1.606375749s ago: executing program 3 (id=2190): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c091) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x2) 1.605918006s ago: executing program 0 (id=2191): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c382, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xc}, {0xffff, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.495947883s ago: executing program 0 (id=2192): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1]) socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x20010, r0, 0x0) 1.433361897s ago: executing program 3 (id=2193): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmmsg$inet6(r0, &(0x7f00000069c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x80}, 0x1c, 0x0}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4f}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYRES8=r0], 0x18}}], 0x2, 0x20002084) 1.254410476s ago: executing program 0 (id=2194): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = socket$inet(0xa, 0x4, 0x85) listen(r5, 0x1) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000014c0)=""/4096, &(0x7f00000024c0)=0x1000) r6 = socket$inet6(0xa, 0x1, 0x88) listen(r6, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000001440)='damon_aggregated\x00', r4, 0x0, 0x5}, 0x18) listen(r7, 0x100) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = socket$can_raw(0x1d, 0x3, 0x1) close(r11) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002600)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x12c}}, 0x0) socket$netlink(0x10, 0x3, 0xe) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000002500)={'security\x00', 0x0, [0x9d12, 0x8f3b, 0x1372, 0x8000, 0x4]}, &(0x7f0000002580)=0x54) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmsg(r0, &(0x7f0000001400)={&(0x7f0000000000)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/116, 0x74}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000300)=""/110, 0x6e}], 0x5, &(0x7f0000000400)=""/4096, 0x1000}, 0x102) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r0, 0x0, 0x0) 1.038143589s ago: executing program 3 (id=2195): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x5, 0x3, {{0x28, 0x4, 0x0, 0x3, 0xa0, 0x68, 0x9, 0x9, 0x4, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x2b, 0xb2, [@multicast2, @empty, @multicast1, @broadcast, @remote, @multicast2, @private=0xa010102, @multicast1, @local, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xe8, [@rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1b, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@local, 0x5}, {@multicast1}, {@broadcast, 0x5}, {@broadcast, 0x7}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x8, 0x4000, 0x8, 0x3ff, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x64, 0x5, 0xa, 0x29, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x23, 0xa6, [@multicast2, @multicast2, @private=0xa010101, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @empty]}, @generic={0x7, 0xf, "f003efaab327cb39c7e51ae1bb"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xda, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xffff}, {@remote}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x2, [{@remote, 0x5}, {@multicast2, 0x3}, {@loopback, 0x8}, {@empty, 0x2}, {@multicast1, 0x7}, {@rand_addr=0x64010100, 0x8}]}, @generic={0x88, 0x10, "409dd24dba7f8918c6c7d01c7754"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xc, 0x4}, {0xd, 0x4}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x3}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x2e, 0x4}]}, {0x0, [0x2e, 0x5f, 0x30, 0x2e, 0x61, 0x5f, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/33, 0x76, 0x21, 0x0, 0xc67, 0x10000, @value}, 0x28) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xffff, 0x10}, {0x0, 0xb}}}, 0x24}}, 0x20044000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x238, 0x0, 0xfeffffff, 0xffffffff, 0x148, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'erspan0\x00', 'pim6reg0\x00'}, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x11, 0x6, 0x0, [0x2, 0xacf, 0x1, 0x5, 0xb, 0x8809, 0x4225, 0xeaf2, 0x81, 0x5, 0x34, 0x2, 0x6, 0xffc0, 0x5], 0xd}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x814}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (rerun: 64) 1.037574642s ago: executing program 3 (id=2196): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x100000001, 0x40, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x100000001, 0x40, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'dvmrp1\x00', {0x2, 0x4e20, @empty}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'dvmrp1\x00', {0x2, 0x4e20, @empty}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xd, 0x3, 0x9}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x28, 0x6a, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x8, 0x20, 0x1, 0xa0}, &(0x7f0000000280)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x8, 0x20, 0x1, 0xa0}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000340)=0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000380)={0x6, 'vlan1\x00', {0x6}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000380)={0x6, 'vlan1\x00', {0x6}, 0x6}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={r4, 0x41, 0xb8}, &(0x7f0000000400)=0x8) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e22, 0x7fff, @local, 0x4}}}, 0x3a) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)={r6, 0x5}, &(0x7f00000004c0)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x10000, 0x3, {{0x25, 0x4, 0x2, 0x23, 0x94, 0x65, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x5, 0x3, "16"}]}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x2, [{@private=0xa010102, 0x7}, {@multicast1, 0xbec7}, {@loopback, 0x8}, {@loopback, 0x2}]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0xc59070827e71eadb, 0x7, "d251e519d6"}, {0x2, 0x8, "3c15f8efb2f2"}, {0x0, 0x10, "cdcdcf82dba5cc8117a7e8b78d40"}, {0x1, 0x11, "3fa718d6e6722dda8f66794aa8edf7"}, {0x2, 0x7, "f4b654812b"}, {0x5, 0x11, "02cac940f4040550306b4beb18d920"}, {0x7, 0x4, 'HH'}]}]}}}}}) bind$packet(r1, &(0x7f0000000600)={0x11, 0x8, r8, 0x1, 0x8, 0x6, @remote}, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={r7, 0x8893, 0x3}, &(0x7f0000000680)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={r7, 0x8893, 0x3}, &(0x7f0000000680)=0x8) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000006c0)=0x6, 0x4) sendmsg$tipc(r1, &(0x7f0000000b00)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x4}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="26e3b93cea2ac2e77ed105ed1cc001e8b4472e299c0807ddaa548c2a35d052f51adf213384d6546ee29b5a77eb7bf7beb10c46ab3a90843aaa650b4cf7e471253913bafc85a0361c51dfedc54d0712addde72c76bc8848a18916d4c174d7127635353ee1bef605a37f8ba15b0b6b1c714816d45f918ae8ba78d094c596882685be10d0d9435d44ad4999ca01ed4842e238af86d23f7cc713d49511dd3225718c4c9c8bed085f8bc2808a56f3702786cc7b4f836a5be10086acde074ccfd94e08", 0xc0}, {&(0x7f0000000800)="e3ec6160b3c5b500c751e857d09c1dd22d3f42cba2fc1618fa9356bde7b806bb5deff037f5b464f55af48ff244e01ff896a8423778bc9e7c06607ec5049bad60ff8924362bd76ac2e8580374cae29d24053775281265c803eac8c38cb94174f06295eed292bf0d30856347f7c621b8c7a47845cdd7d99d2c94bc12d3f58fb0ce47f50cb6f5f910", 0x87}, {&(0x7f00000008c0)="0573885685f323bd4ee405433485b22ebd2a664d566a2e283ced88cce504954b3844cead6baf0392434779221ff122e566c8862fe8cefc4c990dbca938b967177ca2fd99c4491e3bb14781c342887cf34f352c7f107d54a1c1586ddf55adb8c6eab3b157b929db2ad3efcb6a99603d669e021533f59a2c58536c9ba742c31680c38fa3890cf1046179ff5dfac77fc90845ed5c21cc891d19581ceb0a357c2a054226052f38d5bf875210a6f6b9165059c3e4c6d10a31608b776590a7191400ccbd869cf8b3e44f3f213b6c236257262441d64f6a9078ed4a9df96e95c1e2df129605c6f34f3f7b185fce82a393a25bc3f1f5ce", 0xf3}], 0x3, &(0x7f0000000a00)="72921749184c7a4c114be53d25187832a56436b63617c2acdbf1c59a6b10c1de4e803563d74822a27330a5dfad7b7f0737301998dd59103a659e2e5eaece9e34dae6b129157d97dd9edd247a927593098dd0d4b821b584b14c88a2dc1153c0cebf71cd9861b007d68406fc1213ab863addea63e283b417228fd960e8e6969be7d230766f560cf46ca8820f4a2c08552bb7400de46c3c085a9fa7484eb45ae53562a62749f6c5c86d124b27250ca79ec89ae16bf1811b12af4f76ce72a2bb26dd1e121591304dac8778e08f601555758c418bfe116fae66e3da", 0xd9, 0x80}, 0x24004814) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000b40)={r4, 0x0, 0xf72, 0x87ad, 0x69, 0xc337}, &(0x7f0000000b80)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000b40)={r4, 0x0, 0xf72, 0x87ad, 0x69, 0xc337}, &(0x7f0000000b80)=0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x1402, 0x8, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000cc0), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000d00)={'ah\x00'}, &(0x7f0000000d40)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000d00)={'ah\x00'}, &(0x7f0000000d40)=0x1e) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r10, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x40) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000ec0)='bridge_slave_1\x00') 771.613635ms ago: executing program 3 (id=2197): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x403}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0x677600862d7518af], @ipv4=@multicast1, [0xffffffff, 0xffffffff, 0xffffffff], 0x4d5, 0x3502, 0x32, 0x0, 0x6, 0x4}, {@ipv6=@private0, [0x1fffffffe, 0xff, 0xff000000], @ipv6=@empty, [0xff000000, 0x0, 0xff, 0xff], 0x4d2, 0x3501, 0x1d, 0x0, 0x1b, 0x3}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@mcast2, [0x0, 0xff, 0xffff00, 0xffffff00], 0x4d2, 0x3501, 0xd5, 0x1}, {@ipv6=@remote, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xff000000, 0x0, 0xffffff00, 0x968dcf91dbb7ce5], 0x4d1, 0x3503, 0x3a, 0x1, 0xb, 0x6}], 0x7}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r6, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x48, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0xef44ba53c4539a37}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x4}]}]}, 0x48}}, 0x40080) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r10, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@fwd={0xa}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}]}}, &(0x7f0000001240)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffff3, 0x0, 0x6, 0x4, 0x3]}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xa, 0x9, 0x9, 0x8, 0x5, 0xb, 0x10, 0x5, 0xe, 0xf, 0xa, 0xf, 0x5, 0x7, 0x1, 0xf], 0x1, [0x5f1, 0x3, 0xdd64, 0x1, 0xfffa, 0x200, 0x5, 0xdb7, 0x9, 0x9d, 0xa, 0x5cb6, 0x4, 0x2, 0xd, 0xfbff], [0x0, 0x8, 0x8, 0x4, 0x6, 0x4, 0x2, 0x1, 0x4, 0xfffd, 0x0, 0x0, 0x5, 0x4d, 0x7, 0x3ff]}}}}]}, 0x88}}, 0x20000840) 730.575045ms ago: executing program 0 (id=2198): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, 0x0, &(0x7f0000000080)) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0xfffffd40) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000040)={0x1, 0x7}) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER]}, 0x40}}, 0x0) 665.363875ms ago: executing program 1 (id=752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x7, 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 7.79937ms ago: executing program 0 (id=2199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) 0s ago: executing program 2 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d3ac8d503ef5c08d43e3ee003424a8e35819d4e92c076e642a1ddd7219c55951b5d22e68f2f816", 0x27}], 0x1, &(0x7f0000000500)=[{0x10, 0x112, 0x2}, {0x10, 0x119, 0x6}], 0x20}}], 0x1, 0x40015) (async) r1 = socket$inet(0x2, 0xe, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): uration, please check. [ 303.602426][T12926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.663855][T12926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.690463][T12926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.702643][T12926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.825598][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.886545][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.913014][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.920241][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.947175][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.954339][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.038297][T12915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.099693][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.162043][T12986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.181761][T12986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.206193][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.215501][T12986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.241403][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.248548][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.285838][T12986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.317910][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.325062][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.358816][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.384686][ T5838] Bluetooth: hci4: command tx timeout [ 304.513728][T12986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.539120][T12915] veth0_vlan: entered promiscuous mode [ 304.588310][T12986] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.651327][T12915] veth1_vlan: entered promiscuous mode [ 304.661490][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.668672][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.694451][T13110] netlink: 'syz.0.1813': attribute type 21 has an invalid length. [ 304.710696][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.718154][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.736024][T13110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1813'. [ 304.868887][T12915] veth0_macvtap: entered promiscuous mode [ 304.901290][T12915] veth1_macvtap: entered promiscuous mode [ 304.967015][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.000401][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.016599][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.050825][T12915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.069961][T12915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.088944][T12915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.108889][T12915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.236847][T12986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.264765][ T5838] Bluetooth: hci2: command 0x041b tx timeout [ 305.311386][T12926] veth0_vlan: entered promiscuous mode [ 305.385220][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.386497][T12926] veth1_vlan: entered promiscuous mode [ 305.393055][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.491470][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.519855][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.534532][T12926] veth0_macvtap: entered promiscuous mode [ 305.555568][T12926] veth1_macvtap: entered promiscuous mode [ 305.641257][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.708086][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.759013][T12926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.770428][T12926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.781775][T12926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.797045][T12926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.980007][T12986] veth0_vlan: entered promiscuous mode [ 306.030208][T12986] veth1_vlan: entered promiscuous mode [ 306.127878][ T3450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.160723][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.188640][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.230730][T12986] veth0_macvtap: entered promiscuous mode [ 306.253453][ T2124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.255340][T12986] veth1_macvtap: entered promiscuous mode [ 306.303397][T12986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.304362][ T2124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.365628][ T3450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.402435][T12986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.448146][ T3450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.467372][ T5838] Bluetooth: hci4: command tx timeout [ 306.489124][T12986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.498237][T12986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.507843][T12986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.517224][T12986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.571421][ T3450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.681999][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.702360][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.741739][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.760237][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.848848][ T3450] bridge_slave_1: left allmulticast mode [ 306.854826][ T3450] bridge_slave_1: left promiscuous mode [ 306.860583][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.871420][ T3450] bridge_slave_0: left allmulticast mode [ 306.877577][ T3450] bridge_slave_0: left promiscuous mode [ 306.889661][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.335239][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.347009][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.359746][ T3450] bond0 (unregistering): Released all slaves [ 307.509126][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.519757][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.531562][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.540745][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.549708][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.899091][T13171] netlink: 'syz.3.1824': attribute type 39 has an invalid length. [ 308.347055][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.356519][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.364828][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.373732][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.381466][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.390179][T13162] chnl_net:caif_netlink_parms(): no params data found [ 308.422727][ T3450] hsr_slave_0: left promiscuous mode [ 308.428865][ T3450] hsr_slave_1: left promiscuous mode [ 308.436546][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.443981][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.451995][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.462341][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.483374][ T3450] veth1_macvtap: left promiscuous mode [ 308.488988][ T3450] veth0_macvtap: left promiscuous mode [ 308.494737][ T3450] veth1_vlan: left promiscuous mode [ 308.500012][ T3450] veth0_vlan: left promiscuous mode [ 308.859801][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 308.898196][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 309.494933][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.504135][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.525056][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.543308][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.554698][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.593382][ T5835] Bluetooth: hci1: command tx timeout [ 309.862800][T13162] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.890390][T13162] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.904874][T13162] bridge_slave_0: entered allmulticast mode [ 309.919170][T13162] bridge_slave_0: entered promiscuous mode [ 309.926756][T13207] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1831'. [ 310.010420][T13162] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.034502][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.042253][T13162] bridge_slave_1: entered allmulticast mode [ 310.050545][T13162] bridge_slave_1: entered promiscuous mode [ 310.183095][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.221303][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.317676][ T3450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.347593][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 310.375078][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 310.457174][T13162] team0: Port device team_slave_0 added [ 310.466870][ T5835] Bluetooth: hci2: command tx timeout [ 310.492431][ T3450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.552500][T13162] team0: Port device team_slave_1 added [ 310.636568][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.643552][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.669890][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.704109][ T3450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.727649][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.734872][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.761196][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.879012][ T3450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.977132][T13162] hsr_slave_0: entered promiscuous mode [ 310.994999][T13162] hsr_slave_1: entered promiscuous mode [ 311.002514][T13162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.016755][T13162] Cannot create hsr debugfs directory [ 311.049782][T13253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1842'. [ 311.222679][T13194] chnl_net:caif_netlink_parms(): no params data found [ 311.267985][T13263] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1845'. [ 311.286248][T13263] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1845'. [ 311.295360][T13263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.361764][T13176] chnl_net:caif_netlink_parms(): no params data found [ 311.398080][T13268] netlink: 'syz.3.1846': attribute type 32 has an invalid length. [ 311.424121][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 311.585277][ T5835] Bluetooth: hci4: command tx timeout [ 311.636640][T13265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1844'. [ 311.664448][ T5835] Bluetooth: hci1: command tx timeout [ 311.720674][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1844'. [ 311.830372][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 311.852754][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.869846][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.886531][T13194] bridge_slave_0: entered allmulticast mode [ 311.897599][T13194] bridge_slave_0: entered promiscuous mode [ 311.968029][ T3450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.021069][T13176] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.034011][T13176] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.043723][T13176] bridge_slave_0: entered allmulticast mode [ 312.051228][T13176] bridge_slave_0: entered promiscuous mode [ 312.059986][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.068494][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.075943][T13194] bridge_slave_1: entered allmulticast mode [ 312.083582][T13194] bridge_slave_1: entered promiscuous mode [ 312.105291][T13293] netlink: 'syz.0.1851': attribute type 7 has an invalid length. [ 312.125778][ T3450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.146249][T13176] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.153370][T13176] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.161050][T13176] bridge_slave_1: entered allmulticast mode [ 312.168524][T13176] bridge_slave_1: entered promiscuous mode [ 312.244158][ T3450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.283484][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.311547][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.367604][T13176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.381731][T13176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.404434][ T3450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.473963][T13194] team0: Port device team_slave_0 added [ 312.483873][T13194] team0: Port device team_slave_1 added [ 312.504267][T13176] team0: Port device team_slave_0 added [ 312.545598][ T5835] Bluetooth: hci2: command tx timeout [ 312.564001][T13194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.574527][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.601427][T13194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.620580][T13176] team0: Port device team_slave_1 added [ 312.661223][T13194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.668493][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.695876][T13194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.817940][T13194] hsr_slave_0: entered promiscuous mode [ 312.832381][T13194] hsr_slave_1: entered promiscuous mode [ 312.839248][T13194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.848113][T13194] Cannot create hsr debugfs directory [ 312.854117][T13176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.861821][T13176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.888470][T13176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.937904][T13176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.949695][T13176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.975947][T13176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.083781][T13176] hsr_slave_0: entered promiscuous mode [ 313.090300][T13176] hsr_slave_1: entered promiscuous mode [ 313.097253][T13176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.104901][T13176] Cannot create hsr debugfs directory [ 313.110780][ T3450] bridge_slave_1: left allmulticast mode [ 313.118642][ T3450] bridge_slave_1: left promiscuous mode [ 313.126761][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.139199][ T3450] bridge_slave_0: left allmulticast mode [ 313.147124][ T3450] bridge_slave_0: left promiscuous mode [ 313.152879][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.168110][ T3450] bridge_slave_1: left allmulticast mode [ 313.173899][ T3450] bridge_slave_1: left promiscuous mode [ 313.181465][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.193123][ T3450] bridge_slave_0: left allmulticast mode [ 313.200896][ T3450] bridge_slave_0: left promiscuous mode [ 313.210824][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.665830][ T5835] Bluetooth: hci4: command tx timeout [ 313.744710][ T5835] Bluetooth: hci1: command tx timeout [ 313.913768][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.927436][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.937563][ T3450] bond0 (unregistering): Released all slaves [ 314.037420][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.051594][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.062212][ T3450] bond0 (unregistering): Released all slaves [ 314.096172][T13313] tipc: Enabling of bearer rejected, failed to enable media [ 314.275514][T13329] netlink: 'syz.3.1860': attribute type 11 has an invalid length. [ 314.305259][T13329] netlink: 'syz.3.1860': attribute type 4 has an invalid length. [ 314.439484][T13162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.531486][T13162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.588810][T13162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.601963][T13162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.628402][ T5835] Bluetooth: hci2: command tx timeout [ 315.200931][T13162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.321903][T13162] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.419561][T13357] __nla_validate_parse: 6 callbacks suppressed [ 315.419579][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 315.446547][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.453662][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.464249][T13194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.491049][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.498229][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.554481][ T3450] hsr_slave_0: left promiscuous mode [ 315.560878][ T3450] hsr_slave_1: left promiscuous mode [ 315.574240][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.582216][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.592007][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.601682][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.613885][ T3450] hsr_slave_0: left promiscuous mode [ 315.619835][ T3450] hsr_slave_1: left promiscuous mode [ 315.626267][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.633750][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.642897][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.654135][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.688979][ T3450] veth1_macvtap: left promiscuous mode [ 315.694696][ T3450] veth0_macvtap: left promiscuous mode [ 315.700428][ T3450] veth1_vlan: left promiscuous mode [ 315.700640][T13365] netlink: 604 bytes leftover after parsing attributes in process `syz.0.1871'. [ 315.706335][ T3450] veth0_vlan: left promiscuous mode [ 315.725231][ T3450] veth1_macvtap: left promiscuous mode [ 315.730758][ T3450] veth0_macvtap: left promiscuous mode [ 315.736961][ T3450] veth1_vlan: left promiscuous mode [ 315.742612][ T3450] veth0_vlan: left promiscuous mode [ 315.750005][ T5835] Bluetooth: hci4: command tx timeout [ 315.805472][T13366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1871'. [ 315.824987][ T5835] Bluetooth: hci1: command tx timeout [ 316.326919][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 316.365298][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 316.704711][ T5835] Bluetooth: hci2: command tx timeout [ 317.038372][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 317.081639][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 317.189293][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.450674][T13194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.474136][T13363] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 317.515708][T13194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.535173][T13194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.669703][T13369] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 317.772499][T13162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.826282][ T5835] Bluetooth: hci4: command tx timeout [ 318.060156][T13194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.145277][T13389] x_tables: duplicate underflow at hook 1 [ 318.166655][T13176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.213018][T13176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.232237][T13194] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.241665][T13392] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 318.270553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.277854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.290459][T13176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.292661][T13389] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 318.322935][T13176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.371733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.378932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.393146][T13393] lo: left allmulticast mode [ 318.423370][T13389] lo: entered promiscuous mode [ 318.431853][T13389] gre0: entered promiscuous mode [ 318.441286][T13389] erspan0: left allmulticast mode [ 318.461713][T13389] ip_vti0: left allmulticast mode [ 318.485509][T13389] ip6_vti0: left allmulticast mode [ 318.492997][T13389] sit0: left allmulticast mode [ 318.518926][T13389] ip6tnl0: left allmulticast mode [ 318.528071][T13389] ip6gre0: left allmulticast mode [ 318.543366][T13389] ip6gretap0: left allmulticast mode [ 318.573009][T13389] team0: left allmulticast mode [ 318.584806][T13389] ÿ: left allmulticast mode [ 318.614600][T13389] nlmon0: left allmulticast mode [ 318.620621][T13389] caif0: left allmulticast mode [ 318.636770][T13389] batadv0: entered promiscuous mode [ 318.655985][T13389] vxcan0: entered promiscuous mode [ 318.662112][T13389] vxcan1: entered promiscuous mode [ 318.682447][T13389] veth0: entered promiscuous mode [ 318.700222][T13389] veth1: entered promiscuous mode [ 318.718860][T13389] wg0: entered promiscuous mode [ 318.732656][T13389] wg1: entered promiscuous mode [ 318.745614][T13389] wg2: left allmulticast mode [ 318.756741][T13389] veth0_to_bridge: entered promiscuous mode [ 318.778379][T13389] veth1_to_bridge: entered promiscuous mode [ 318.804697][T13389] bridge_slave_1: entered promiscuous mode [ 318.818785][T13389] veth0_to_bond: entered promiscuous mode [ 318.825522][T13389] bond_slave_0: entered promiscuous mode [ 318.832379][T13389] veth1_to_bond: entered promiscuous mode [ 318.840550][T13389] bond_slave_1: entered promiscuous mode [ 318.857213][T13389] veth0_to_team: entered promiscuous mode [ 318.869730][T13389] team_slave_0: entered promiscuous mode [ 318.882194][T13389] veth1_to_team: entered promiscuous mode [ 318.900137][T13389] team_slave_1: entered promiscuous mode [ 318.907528][T13389] veth0_to_batadv: entered promiscuous mode [ 318.919497][T13389] batadv_slave_0: entered promiscuous mode [ 318.939461][T13389] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 319.016676][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.161654][T13405] syzkaller0: entered allmulticast mode [ 319.179154][T13405] syzkaller0 (unregistering): left allmulticast mode [ 319.334086][T13176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.371706][T13162] veth0_vlan: entered promiscuous mode [ 319.410289][T13162] veth1_vlan: entered promiscuous mode [ 319.439084][T13176] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.482605][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.489839][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.600971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.608185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.687422][T13162] veth0_macvtap: entered promiscuous mode [ 319.757349][T13162] veth1_macvtap: entered promiscuous mode [ 319.816659][T13194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.843752][T13162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.890081][T13162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.920632][T13162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.964472][T13162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.973214][T13162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.004582][T13162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.203717][T13452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1890'. [ 320.243642][T13452] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1890'. [ 320.261712][T13452] netlink: 'syz.0.1890': attribute type 5 has an invalid length. [ 320.268254][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.278189][T13176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.284780][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.312389][T13452] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1890'. [ 320.379932][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.398763][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.439276][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 320.463952][T13176] veth0_vlan: entered promiscuous mode [ 320.566872][T13176] veth1_vlan: entered promiscuous mode [ 320.642335][T13460] netlink: 'syz.0.1893': attribute type 2 has an invalid length. [ 320.650903][T13460] netlink: 'syz.0.1893': attribute type 8 has an invalid length. [ 320.659000][T13460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1893'. [ 320.662418][T13194] veth0_vlan: entered promiscuous mode [ 320.703797][T13176] veth0_macvtap: entered promiscuous mode [ 320.714834][T13194] veth1_vlan: entered promiscuous mode [ 320.723756][T13176] veth1_macvtap: entered promiscuous mode [ 320.811524][ T3456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.838923][T13176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.857457][T13176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.942416][ T3456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.972250][T13194] veth0_macvtap: entered promiscuous mode [ 320.987948][T13194] veth1_macvtap: entered promiscuous mode [ 321.000195][T13176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.022652][T13176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.032206][T13176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.047156][T13176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.073483][ T3456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.114140][T13194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.141547][ T3456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.173083][T13194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.200062][T13194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.210269][T13194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.222670][T13194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.231610][T13194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.290667][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.300056][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.410863][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.420239][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.462660][ T3456] bridge_slave_1: left allmulticast mode [ 321.469159][ T3456] bridge_slave_1: left promiscuous mode [ 321.476559][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.488401][ T3456] bridge_slave_0: left allmulticast mode [ 321.494079][ T3456] bridge_slave_0: left promiscuous mode [ 321.499893][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.783194][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.794057][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.804084][ T3456] bond0 (unregistering): Released all slaves [ 321.842579][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.862473][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.967602][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.977115][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.685654][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.697853][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.708111][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.720512][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.728255][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.749075][ T3456] hsr_slave_0: left promiscuous mode [ 322.809441][ T3456] hsr_slave_1: left promiscuous mode [ 322.827802][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.846282][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.866275][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.873739][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.930205][ T3456] veth1_macvtap: left promiscuous mode [ 322.940197][ T3456] veth0_macvtap: left promiscuous mode [ 322.946504][ T3456] veth1_vlan: left promiscuous mode [ 322.951789][ T3456] veth0_vlan: left promiscuous mode [ 323.332677][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 323.371534][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 324.017605][T13481] chnl_net:caif_netlink_parms(): no params data found [ 324.110407][ T3456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.128800][T13481] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.136850][T13481] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.144048][T13481] bridge_slave_0: entered allmulticast mode [ 324.153221][T13481] bridge_slave_0: entered promiscuous mode [ 324.162338][T13481] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.172841][T13481] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.180327][T13481] bridge_slave_1: entered allmulticast mode [ 324.191227][T13481] bridge_slave_1: entered promiscuous mode [ 324.210491][ T3456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.249384][T13481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.274584][ T3456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.294087][T13481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.340513][ T3456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.371996][T13491] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1900'. [ 324.383956][T13481] team0: Port device team_slave_0 added [ 324.407553][T13481] team0: Port device team_slave_1 added [ 324.467171][T13481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.474156][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.507816][T13481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.546083][T13481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.553065][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.579546][T13481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.649870][ T3456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.738020][ T3456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.759010][T13481] hsr_slave_0: entered promiscuous mode [ 324.765719][T13481] hsr_slave_1: entered promiscuous mode [ 324.771981][T13481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.782439][T13481] Cannot create hsr debugfs directory [ 324.789246][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.796536][ T5139] Bluetooth: hci1: command tx timeout [ 324.805554][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.813759][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.825285][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.833782][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.880593][ T3456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.953873][ T3456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.190916][ T3456] bridge_slave_1: left allmulticast mode [ 325.197265][ T3456] bridge_slave_1: left promiscuous mode [ 325.203034][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.215414][ T3456] bridge_slave_0: left allmulticast mode [ 325.221090][ T3456] bridge_slave_0: left promiscuous mode [ 325.227408][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.244141][ T3456] bridge_slave_1: left allmulticast mode [ 325.250094][ T3456] bridge_slave_1: left promiscuous mode [ 325.256265][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.266305][ T3456] bridge_slave_0: left allmulticast mode [ 325.271973][ T3456] bridge_slave_0: left promiscuous mode [ 325.280598][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.813435][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 325.849736][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.861268][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.876628][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 325.890279][ T3456] bond0 (unregistering): Released all slaves [ 326.013554][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.029915][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.042606][ T3456] bond0 (unregistering): Released all slaves [ 326.082594][T13498] xfrm1: entered promiscuous mode [ 326.089939][T13498] xfrm1: entered allmulticast mode [ 326.115155][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.130259][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.140554][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.152376][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.173819][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.325602][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 326.793478][T13527] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 326.808773][T13527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1911'. [ 326.822686][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 326.854032][T13481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.866861][ T5838] Bluetooth: hci1: command tx timeout [ 326.948143][ T5838] Bluetooth: hci2: command tx timeout [ 326.964139][T13481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.990583][T13481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.011676][T13481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.048114][T13492] chnl_net:caif_netlink_parms(): no params data found [ 327.381409][T13553] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 327.539413][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.550122][T13492] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.574585][T13492] bridge_slave_0: entered allmulticast mode [ 327.612717][T13492] bridge_slave_0: entered promiscuous mode [ 327.640477][T13492] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.656915][T13492] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.672226][T13492] bridge_slave_1: entered allmulticast mode [ 327.706074][T13492] bridge_slave_1: entered promiscuous mode [ 327.927924][T13492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.970111][T13502] chnl_net:caif_netlink_parms(): no params data found [ 328.030730][ T3456] hsr_slave_0: left promiscuous mode [ 328.042381][ T3456] hsr_slave_1: left promiscuous mode [ 328.050808][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.067952][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.079409][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.087213][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.099545][ T3456] hsr_slave_0: left promiscuous mode [ 328.105977][ T3456] hsr_slave_1: left promiscuous mode [ 328.111834][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.119497][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.127561][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.135274][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.166913][ T3456] veth1_macvtap: left promiscuous mode [ 328.172491][ T3456] veth0_macvtap: left promiscuous mode [ 328.178646][ T3456] veth1_vlan: left promiscuous mode [ 328.185221][ T3456] veth0_vlan: left promiscuous mode [ 328.191463][ T3456] veth1_macvtap: left promiscuous mode [ 328.197337][ T3456] veth0_macvtap: left promiscuous mode [ 328.202912][ T3456] veth1_vlan: left promiscuous mode [ 328.208381][ T3456] veth0_vlan: left promiscuous mode [ 328.224942][ T5838] Bluetooth: hci4: command tx timeout [ 328.712412][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 328.757515][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 328.947405][ T5838] Bluetooth: hci1: command tx timeout [ 329.029959][ T5838] Bluetooth: hci2: command tx timeout [ 329.450389][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 329.490543][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 329.872376][T13492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.986818][ T59] block nbd0: Possible stuck request ffff8880250b0000: control (read@0,4096B). Runtime 30 seconds [ 330.001605][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1922'. [ 330.120548][T13492] team0: Port device team_slave_0 added [ 330.190063][T13492] team0: Port device team_slave_1 added [ 330.297537][T13492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.304929][ T5838] Bluetooth: hci4: command tx timeout [ 330.313151][T13492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.340849][T13492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.352612][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.361458][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.368903][T13502] bridge_slave_0: entered allmulticast mode [ 330.380182][T13502] bridge_slave_0: entered promiscuous mode [ 330.389228][T13502] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.396665][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.403929][T13502] bridge_slave_1: entered allmulticast mode [ 330.411210][T13502] bridge_slave_1: entered promiscuous mode [ 330.417927][T13587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.444857][T13492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.451850][T13492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.478296][T13492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.586866][T13502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.622736][T13597] netlink: 'syz.0.1928': attribute type 1 has an invalid length. [ 330.631865][T13597] netlink: 'syz.0.1928': attribute type 4 has an invalid length. [ 330.641410][T13597] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1928'. [ 330.650172][T13481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.670962][T13502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.808161][T13492] hsr_slave_0: entered promiscuous mode [ 330.817467][T13492] hsr_slave_1: entered promiscuous mode [ 330.823595][T13492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.833438][T13492] Cannot create hsr debugfs directory [ 330.863540][T13502] team0: Port device team_slave_0 added [ 330.955396][T13502] team0: Port device team_slave_1 added [ 330.974162][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.030841][ T5838] Bluetooth: hci1: command tx timeout [ 331.068499][T13502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.079840][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.112965][T13502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.115402][ T5838] Bluetooth: hci2: command tx timeout [ 331.137435][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.144667][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.183160][T13502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.192605][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.222091][T13502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.240310][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.247490][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.396175][T13502] hsr_slave_0: entered promiscuous mode [ 331.403176][T13502] hsr_slave_1: entered promiscuous mode [ 331.415111][T13502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.422702][T13502] Cannot create hsr debugfs directory [ 331.556627][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 331.567796][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 331.633175][T13481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.723305][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 331.826570][T13632] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1939'. [ 332.101450][T13492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.129164][T13492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.145340][T13492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.161534][T13492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.172669][T13647] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 332.238924][T13647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.251137][T13651] vlan5: entered allmulticast mode [ 332.268498][T13651] bond5: entered allmulticast mode [ 332.328007][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.384472][ T5838] Bluetooth: hci4: command tx timeout [ 332.486146][T13481] veth0_vlan: entered promiscuous mode [ 332.499602][T13481] veth1_vlan: entered promiscuous mode [ 332.718810][T13502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.730564][T13502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.730594][T13671] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.766137][T13481] veth0_macvtap: entered promiscuous mode [ 332.774808][T13502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.796335][T13502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.829415][T13481] veth1_macvtap: entered promiscuous mode [ 332.942345][T13492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.949286][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 332.988960][T13481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.089117][T13680] veth11: entered promiscuous mode [ 333.095537][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 333.128211][T13481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.184594][ T5838] Bluetooth: hci2: command tx timeout [ 333.271471][T13689] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 333.313598][T13481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.322670][T13481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.339279][T13481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.350145][T13481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.362647][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 333.411222][T13492] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.443138][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.450342][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.605319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.612488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.625892][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 333.759138][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.780217][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.813675][T13706] netlink: 'syz.3.1963': attribute type 4 has an invalid length. [ 333.852859][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.874736][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.899838][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.953826][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.986842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.993988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.053306][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.060535][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.106710][T13720] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 334.242614][T13725] xt_CT: No such helper "pptp" [ 334.371144][T13492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.466251][ T5838] Bluetooth: hci4: command tx timeout [ 334.512060][ T3450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.548354][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1971'. [ 334.658810][ T3450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.730787][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.849243][ T3450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.870864][T13502] veth0_vlan: entered promiscuous mode [ 334.900613][T13502] veth1_vlan: entered promiscuous mode [ 334.947820][ T3450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.990054][T13502] veth0_macvtap: entered promiscuous mode [ 335.001322][T13502] veth1_macvtap: entered promiscuous mode [ 335.039192][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.063381][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.076877][T13492] veth0_vlan: entered promiscuous mode [ 335.089810][T13502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.100017][T13502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.110222][T13502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.119366][T13502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.131824][T13492] veth1_vlan: entered promiscuous mode [ 335.257617][T13492] veth0_macvtap: entered promiscuous mode [ 335.267956][ T3450] bridge_slave_1: left allmulticast mode [ 335.274507][ T3450] bridge_slave_1: left promiscuous mode [ 335.280208][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.291402][ T3450] bridge_slave_0: left allmulticast mode [ 335.297853][ T3450] bridge_slave_0: left promiscuous mode [ 335.303539][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.606207][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.616791][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.626944][ T3450] bond0 (unregistering): Released all slaves [ 335.657904][T13492] veth1_macvtap: entered promiscuous mode [ 335.725418][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.730607][T13492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.733267][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.746424][T13492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.789573][T13492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.799076][T13492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.808386][T13492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.817229][T13492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.891607][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.899821][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.141699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.184454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.464485][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.506802][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.605418][ T3450] hsr_slave_0: left promiscuous mode [ 336.611896][ T3450] hsr_slave_1: left promiscuous mode [ 336.622445][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.658886][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.685345][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.698029][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.698785][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.715342][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.723493][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.732816][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.744016][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.797817][ T3450] veth1_macvtap: left promiscuous mode [ 336.803415][ T3450] veth0_macvtap: left promiscuous mode [ 336.809676][ T3450] veth1_vlan: left promiscuous mode [ 336.815281][ T3450] veth0_vlan: left promiscuous mode [ 337.388770][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 337.437826][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 338.249911][ T3450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.493897][T13769] chnl_net:caif_netlink_parms(): no params data found [ 338.617772][ T3450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.720761][ T3450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.784493][ T5838] Bluetooth: hci1: command tx timeout [ 338.802971][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.812139][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.822315][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.832708][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.850694][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.851603][ T3450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.873848][T13769] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.886973][T13769] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.894148][T13769] bridge_slave_0: entered allmulticast mode [ 338.901970][T13769] bridge_slave_0: entered promiscuous mode [ 338.912278][T13769] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.920974][T13769] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.928882][T13769] bridge_slave_1: entered allmulticast mode [ 338.938516][T13769] bridge_slave_1: entered promiscuous mode [ 338.992016][T13769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.009402][T13769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.073596][T13769] team0: Port device team_slave_0 added [ 339.082976][T13769] team0: Port device team_slave_1 added [ 339.165844][T13769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.172832][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.204919][T13769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.279290][ T3450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.305405][T13769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.312356][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.355496][T13769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.404589][ T3450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.492953][ T3450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.513198][T13769] hsr_slave_0: entered promiscuous mode [ 339.519653][T13769] hsr_slave_1: entered promiscuous mode [ 339.527010][T13769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.535226][T13769] Cannot create hsr debugfs directory [ 339.567356][ T3450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.727734][T13795] chnl_net:caif_netlink_parms(): no params data found [ 339.868074][ T3450] bridge_slave_1: left allmulticast mode [ 339.873786][ T3450] bridge_slave_1: left promiscuous mode [ 339.886598][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.913825][ T3450] bridge_slave_0: left allmulticast mode [ 339.923720][ T3450] bridge_slave_0: left promiscuous mode [ 339.930642][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.961890][ T3450] bridge_slave_1: left allmulticast mode [ 339.975059][ T3450] bridge_slave_1: left promiscuous mode [ 339.980923][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.006664][ T3450] bridge_slave_0: left allmulticast mode [ 340.012365][ T3450] bridge_slave_0: left promiscuous mode [ 340.034866][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.319743][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.330851][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.340319][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.351834][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.367587][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.719415][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.730134][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.740306][ T3450] bond0 (unregistering): Released all slaves [ 340.837999][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.848970][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.858949][ T3450] bond0 (unregistering): Released all slaves [ 340.874692][ T5835] Bluetooth: hci1: command tx timeout [ 340.946523][ T5835] Bluetooth: hci2: command tx timeout [ 341.105964][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.113127][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.130215][T13795] bridge_slave_0: entered allmulticast mode [ 341.141551][T13795] bridge_slave_0: entered promiscuous mode [ 341.157250][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.178310][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.192585][T13795] bridge_slave_1: entered allmulticast mode [ 341.200869][T13795] bridge_slave_1: entered promiscuous mode [ 341.480655][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.528331][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.787761][T13795] team0: Port device team_slave_0 added [ 341.962214][T13795] team0: Port device team_slave_1 added [ 342.114082][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.132475][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.198663][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.235323][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.249944][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.283061][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.464567][ T5835] Bluetooth: hci4: command tx timeout [ 342.499930][T13769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.530734][ T3450] hsr_slave_0: left promiscuous mode [ 342.537637][ T3450] hsr_slave_1: left promiscuous mode [ 342.543622][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.551996][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.560684][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.568291][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.582591][ T3450] hsr_slave_0: left promiscuous mode [ 342.588705][ T3450] hsr_slave_1: left promiscuous mode [ 342.595487][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.603804][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.613207][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.624832][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.662446][ T3450] veth1_macvtap: left promiscuous mode [ 342.671214][ T3450] veth0_macvtap: left promiscuous mode [ 342.677368][ T3450] veth1_vlan: left promiscuous mode [ 342.682755][ T3450] veth0_vlan: left promiscuous mode [ 342.691231][ T3450] veth1_macvtap: left promiscuous mode [ 342.696826][ T3450] veth0_macvtap: left promiscuous mode [ 342.702373][ T3450] veth1_vlan: left promiscuous mode [ 342.707864][ T3450] veth0_vlan: left promiscuous mode [ 342.948452][ T5835] Bluetooth: hci1: command tx timeout [ 343.028555][ T5835] Bluetooth: hci2: command tx timeout [ 343.191337][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 343.230379][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 343.859891][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 343.899571][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 344.250859][T13769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.347145][T13872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1997'. [ 344.359272][T13769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.398693][T13795] hsr_slave_0: entered promiscuous mode [ 344.407221][T13795] hsr_slave_1: entered promiscuous mode [ 344.413598][T13795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.426499][T13795] Cannot create hsr debugfs directory [ 344.433251][T13769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.441545][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 344.454269][T13874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.550198][ T5835] Bluetooth: hci4: command tx timeout [ 344.650332][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 344.696337][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 344.707263][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 344.926023][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 344.944575][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 344.994124][T13896] netlink: 'syz.0.2003': attribute type 10 has an invalid length. [ 344.998452][T13814] chnl_net:caif_netlink_parms(): no params data found [ 345.026797][ T5835] Bluetooth: hci1: command tx timeout [ 345.039504][T13896] bridge0: port 3(team0) entered blocking state [ 345.046070][T13896] bridge0: port 3(team0) entered disabled state [ 345.081473][T13769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.104956][ T5835] Bluetooth: hci2: command tx timeout [ 345.183174][T13769] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.241577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.248758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.310411][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.319490][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.327258][T13814] bridge_slave_0: entered allmulticast mode [ 345.337586][T13814] bridge_slave_0: entered promiscuous mode [ 345.359312][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.366453][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.377998][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.392770][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.406200][T13814] bridge_slave_1: entered allmulticast mode [ 345.414083][T13814] bridge_slave_1: entered promiscuous mode [ 345.490048][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.535325][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.610292][T13814] team0: Port device team_slave_0 added [ 345.619944][T13814] team0: Port device team_slave_1 added [ 345.760933][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.768186][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.799032][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 345.825220][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.889829][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.900203][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.929742][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.930662][T13916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 345.962142][T13916] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 345.971618][T13916] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2009'. [ 346.005486][T13795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.045067][T13795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 346.109648][T13795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 346.148251][T13795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 346.190983][T13814] hsr_slave_0: entered promiscuous mode [ 346.197776][T13814] hsr_slave_1: entered promiscuous mode [ 346.209683][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.224476][T13814] Cannot create hsr debugfs directory [ 346.317289][T13930] netlink: 'syz.0.2014': attribute type 12 has an invalid length. [ 346.548260][T13769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.625447][ T5835] Bluetooth: hci4: command tx timeout [ 346.769397][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.853539][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.899291][T13769] veth0_vlan: entered promiscuous mode [ 346.918498][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.925708][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.975603][T13769] veth1_vlan: entered promiscuous mode [ 347.002376][T13959] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 347.029629][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.036968][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.183101][T13769] veth0_macvtap: entered promiscuous mode [ 347.194942][ T5835] Bluetooth: hci2: command tx timeout [ 347.239840][T13769] veth1_macvtap: entered promiscuous mode [ 347.349512][T13769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.381407][T13769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.425895][T13769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.439134][T13769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.449741][T13769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.474378][T13769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.500852][T13814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.540197][T13814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.575829][T13814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.624901][T13814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.740865][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.773056][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.808474][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.810863][T13990] netlink: 'syz.0.2031': attribute type 3 has an invalid length. [ 347.882447][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.904550][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 347.924152][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.970557][T13994] netlink: 'syz.3.2033': attribute type 2 has an invalid length. [ 347.998355][T13994] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 348.008813][T13992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.020807][T13996] netlink: 'syz.3.2033': attribute type 2 has an invalid length. [ 348.041179][T13795] veth0_vlan: entered promiscuous mode [ 348.047925][T13996] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 348.073829][T13795] veth1_vlan: entered promiscuous mode [ 348.151230][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.277891][T14007] delete_channel: no stack [ 348.289815][T13795] veth0_macvtap: entered promiscuous mode [ 348.321050][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.331881][T13795] veth1_macvtap: entered promiscuous mode [ 348.368574][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.375745][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.399123][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.418222][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.425424][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.453222][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.509443][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.562920][T13795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.588092][T13795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.604406][T13795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.613130][T13795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.702762][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.713258][ T5835] Bluetooth: hci4: command tx timeout [ 348.827242][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.880158][ T2124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.903613][ T2124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.940550][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.970405][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.982200][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.041435][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.202663][ T12] bridge_slave_1: left allmulticast mode [ 349.208915][ T12] bridge_slave_1: left promiscuous mode [ 349.218565][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.229109][ T12] bridge_slave_0: left allmulticast mode [ 349.237328][ T12] bridge_slave_0: left promiscuous mode [ 349.243177][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.605383][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.617843][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.629124][ T12] bond0 (unregistering): Released all slaves [ 349.828952][T14028] __nla_validate_parse: 4 callbacks suppressed [ 349.828970][T14028] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2037'. [ 349.972474][T13814] veth0_vlan: entered promiscuous mode [ 349.999124][T13814] veth1_vlan: entered promiscuous mode [ 350.075741][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.093588][T13814] veth0_macvtap: entered promiscuous mode [ 350.096029][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.108975][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.120597][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.133975][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.141549][T13814] veth1_macvtap: entered promiscuous mode [ 350.281563][ T12] hsr_slave_0: left promiscuous mode [ 350.288924][ T12] hsr_slave_1: left promiscuous mode [ 350.295526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.303550][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.311962][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.319801][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.342986][ T12] veth1_macvtap: left promiscuous mode [ 350.348714][ T12] veth0_macvtap: left promiscuous mode [ 350.354856][ T12] veth1_vlan: left promiscuous mode [ 350.360181][ T12] veth0_vlan: left promiscuous mode [ 350.768184][ T12] team0 (unregistering): Port device team_slave_1 removed [ 350.809987][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.180171][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.211970][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.233499][T13814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.243555][T13814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.253365][T13814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.262544][T13814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.575745][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.634587][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.763834][T14029] chnl_net:caif_netlink_parms(): no params data found [ 351.892541][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.905766][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.920472][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.932380][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.943268][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.981353][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.107847][T14060] xt_hashlimit: overflow, rate too high: 0 [ 352.108947][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.225857][ T5838] Bluetooth: hci1: command tx timeout [ 352.270107][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.299763][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.345999][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.479505][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.542282][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2049'. [ 352.594039][T14029] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.602364][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.610254][T14029] bridge_slave_0: entered allmulticast mode [ 352.619004][T14029] bridge_slave_0: entered promiscuous mode [ 352.628324][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.635504][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.642856][T14029] bridge_slave_1: entered allmulticast mode [ 352.650721][T14029] bridge_slave_1: entered promiscuous mode [ 352.838798][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.852142][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.012396][T14029] team0: Port device team_slave_0 added [ 353.057996][T14029] team0: Port device team_slave_1 added [ 353.153478][ T12] bridge_slave_1: left allmulticast mode [ 353.160363][ T12] bridge_slave_1: left promiscuous mode [ 353.168064][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.186651][ T12] bridge_slave_0: left allmulticast mode [ 353.192341][ T12] bridge_slave_0: left promiscuous mode [ 353.198500][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.486531][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.497415][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.508965][ T12] bond0 (unregistering): Released all slaves [ 353.520859][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.530799][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.558733][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.584749][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.591728][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.623114][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.649333][T14053] chnl_net:caif_netlink_parms(): no params data found [ 353.771594][T14029] hsr_slave_0: entered promiscuous mode [ 353.778327][T14029] hsr_slave_1: entered promiscuous mode [ 353.786384][T14029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.793964][T14029] Cannot create hsr debugfs directory [ 353.859705][T14053] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.869437][T14053] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.879337][T14053] bridge_slave_0: entered allmulticast mode [ 353.887465][T14053] bridge_slave_0: entered promiscuous mode [ 353.911377][T14053] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.923298][T14053] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.931212][T14053] bridge_slave_1: entered allmulticast mode [ 353.996048][ T5838] Bluetooth: hci2: command tx timeout [ 354.032512][T14053] bridge_slave_1: entered promiscuous mode [ 354.076121][ T12] hsr_slave_0: left promiscuous mode [ 354.081929][ T12] hsr_slave_1: left promiscuous mode [ 354.089051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.096719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.104788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.112226][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.131069][ T12] veth1_macvtap: left promiscuous mode [ 354.137542][ T12] veth0_macvtap: left promiscuous mode [ 354.143149][ T12] veth1_vlan: left promiscuous mode [ 354.149930][ T12] veth0_vlan: left promiscuous mode [ 354.308852][ T5838] Bluetooth: hci1: command tx timeout [ 354.511532][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.550770][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.750822][T14095] unsupported nla_type 52263 [ 354.757494][T14095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2052'. [ 354.996689][T14103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2056'. [ 355.148384][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.164838][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.181630][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.209619][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.218233][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.219933][T14109] nft_compat: unsupported protocol 0 [ 355.373827][T14053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.440516][T14053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.549829][T14053] team0: Port device team_slave_0 added [ 355.603322][T14053] team0: Port device team_slave_1 added [ 355.736644][T14053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.754366][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.804502][T14053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.852689][T14053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.859819][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.886410][T14053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.920698][T14123] sctp: [Deprecated]: syz.3.2064 (pid 14123) Use of int in max_burst socket option deprecated. [ 355.920698][T14123] Use struct sctp_assoc_value instead [ 356.065685][ T5838] Bluetooth: hci2: command tx timeout [ 356.074455][T14053] hsr_slave_0: entered promiscuous mode [ 356.080920][T14053] hsr_slave_1: entered promiscuous mode [ 356.091653][T14053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.114368][T14053] Cannot create hsr debugfs directory [ 356.153000][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.240845][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.350839][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.385333][ T5838] Bluetooth: hci1: command tx timeout [ 356.473252][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.530895][T14106] chnl_net:caif_netlink_parms(): no params data found [ 356.752644][T14145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2068'. [ 356.809585][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 356.848144][T14106] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.859685][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.872491][T14106] bridge_slave_0: entered allmulticast mode [ 356.881818][T14106] bridge_slave_0: entered promiscuous mode [ 356.891376][ T12] bridge_slave_1: left allmulticast mode [ 356.898391][ T12] bridge_slave_1: left promiscuous mode [ 356.904744][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.935570][ T12] bridge_slave_0: left allmulticast mode [ 356.942605][ T12] bridge_slave_0: left promiscuous mode [ 356.974349][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.264644][ T5838] Bluetooth: hci4: command tx timeout [ 357.306601][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2076'. [ 357.489004][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.499736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.509991][ T12] bond0 (unregistering): Released all slaves [ 357.540084][T14029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.551836][T14106] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.559831][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.570374][T14106] bridge_slave_1: entered allmulticast mode [ 357.578173][T14106] bridge_slave_1: entered promiscuous mode [ 357.647144][T14179] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 357.655212][T14029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.672918][T14029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.830924][T14029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.840829][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 357.861470][T14106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.875264][T14106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.041458][T14106] team0: Port device team_slave_0 added [ 358.070058][T14188] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2080'. [ 358.078240][T14106] team0: Port device team_slave_1 added [ 358.141653][T14193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 358.149159][ T5838] Bluetooth: hci2: command tx timeout [ 358.251766][T14106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.274369][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.344200][T14106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.370533][T14106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.380881][T14106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.407756][T14106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.453851][ T12] hsr_slave_0: left promiscuous mode [ 358.461117][ T12] hsr_slave_1: left promiscuous mode [ 358.467219][ T5838] Bluetooth: hci1: command tx timeout [ 358.473336][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.480919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.485573][T14203] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 358.497197][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.505010][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.540406][ T12] veth1_macvtap: left promiscuous mode [ 358.547388][ T12] veth0_macvtap: left promiscuous mode [ 358.553174][ T12] veth1_vlan: left promiscuous mode [ 358.558884][ T12] veth0_vlan: left promiscuous mode [ 358.654243][T14209] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 358.781478][T14212] netlink: 'syz.0.2088': attribute type 10 has an invalid length. [ 358.794266][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2088'. [ 359.020905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 359.059410][ T12] team0 (unregistering): Port device team_slave_0 removed [ 359.347406][ T5838] Bluetooth: hci4: command tx timeout [ 359.458660][T14212] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.475064][T14212] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.483423][T14212] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.494554][T14212] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.507298][T14212] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.516797][T14212] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.525845][T14212] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.534036][T14212] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.547183][T14212] geneve0: entered promiscuous mode [ 359.552517][T14212] geneve0: entered allmulticast mode [ 359.560176][T14212] team0: Port device geneve0 added [ 359.743954][T14106] hsr_slave_0: entered promiscuous mode [ 359.751664][T14106] hsr_slave_1: entered promiscuous mode [ 359.760260][T14106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.769253][T14106] Cannot create hsr debugfs directory [ 359.792096][T14053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.801550][T14224] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2093'. [ 359.833250][T14224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.869763][T14053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.909312][T14053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.917426][T14227] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.960457][T14053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.065072][ T59] block nbd0: Possible stuck request ffff8880250b0000: control (read@0,4096B). Runtime 60 seconds [ 360.229634][ T5838] Bluetooth: hci2: command tx timeout [ 360.254232][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 360.258056][T14029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.421202][T14029] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.458860][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.466134][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.515610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.522788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.556183][T14053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.643091][T14248] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 360.671537][T14248] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 360.671789][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 360.706006][T14053] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.741746][T14029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.776136][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.783311][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.897969][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.905161][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.027674][T14106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.073041][T14106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.093035][T14264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2106'. [ 361.098269][T14106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.135359][T14106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.164171][T14264] C: renamed from team_slave_0 [ 361.175837][T14264] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 361.192802][T14264] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 361.237319][T14029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.306527][T14053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.337045][T14275] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2108'. [ 361.368703][T14278] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2108'. [ 361.425179][ T5838] Bluetooth: hci4: command tx timeout [ 361.428446][T14029] veth0_vlan: entered promiscuous mode [ 361.512847][T14029] veth1_vlan: entered promiscuous mode [ 361.529463][T14053] veth0_vlan: entered promiscuous mode [ 361.581513][T14053] veth1_vlan: entered promiscuous mode [ 361.613354][T14106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.655352][T14106] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.693731][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.700962][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.719250][T14029] veth0_macvtap: entered promiscuous mode [ 361.737412][T14053] veth0_macvtap: entered promiscuous mode [ 361.750210][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.757430][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.773338][T14029] veth1_macvtap: entered promiscuous mode [ 361.799396][T14053] veth1_macvtap: entered promiscuous mode [ 361.861634][T14053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.878269][T14053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.912310][T14029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.922421][T14296] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 361.943100][T14053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.952984][T14053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.962299][T14053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.971863][T14053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.992456][T14029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.054661][T14029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.063428][T14029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.085650][T14029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.098296][T14029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.303466][ T2124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.339582][ T2124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.428404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.444644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.525468][T14319] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 362.549807][ T2124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.559289][ T2124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.602573][ T2124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.613745][T14106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.625362][ T2124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.095945][T14341] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 363.116510][T14341] netlink: 'syz.0.2124': attribute type 3 has an invalid length. [ 363.128483][T14341] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2124'. [ 363.139028][T14341] NCSI netlink: No device for ifindex 813332851 [ 363.173310][ T6041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.337254][ T6041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.462241][ T6041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.505611][ T5838] Bluetooth: hci4: command tx timeout [ 363.579456][ T6041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.611537][T14106] veth0_vlan: entered promiscuous mode [ 363.630107][T14106] veth1_vlan: entered promiscuous mode [ 363.686448][T14346] sctp: [Deprecated]: syz.0.2125 (pid 14346) Use of int in max_burst socket option. [ 363.686448][T14346] Use struct sctp_assoc_value instead [ 363.703044][T14106] veth0_macvtap: entered promiscuous mode [ 363.729637][T14106] veth1_macvtap: entered promiscuous mode [ 363.781121][T14106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.911973][T14106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.921347][ T6041] bridge_slave_1: left allmulticast mode [ 363.932894][ T6041] bridge_slave_1: left promiscuous mode [ 363.940526][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.955529][ T6041] bridge_slave_0: left allmulticast mode [ 363.961351][ T6041] bridge_slave_0: left promiscuous mode [ 363.978167][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.994483][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.005100][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.013764][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.025329][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.036298][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.329417][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.340009][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.350570][ T6041] bond0 (unregistering): Released all slaves [ 364.372556][T14106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.382135][T14106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.391109][T14106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.399883][T14106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.652342][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.663004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.757267][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.770284][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.891481][T14352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2126'. [ 364.911873][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2126'. [ 365.356538][ T6041] hsr_slave_0: left promiscuous mode [ 365.390376][ T6041] hsr_slave_1: left promiscuous mode [ 365.410754][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.419089][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.428687][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.436867][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.436882][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.451822][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.469825][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.469859][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.491796][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.503946][ T6041] veth1_macvtap: left promiscuous mode [ 365.528249][ T6041] veth0_macvtap: left promiscuous mode [ 365.533976][ T6041] veth1_vlan: left promiscuous mode [ 365.540981][ T6041] veth0_vlan: left promiscuous mode [ 365.923906][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 365.959564][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 366.064995][ T5838] Bluetooth: hci1: command tx timeout [ 366.489593][T14348] chnl_net:caif_netlink_parms(): no params data found [ 366.653311][T14348] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.660798][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.671880][T14348] bridge_slave_0: entered allmulticast mode [ 366.679801][T14348] bridge_slave_0: entered promiscuous mode [ 366.698539][T14348] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.707968][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.715305][T14348] bridge_slave_1: entered allmulticast mode [ 366.722986][T14348] bridge_slave_1: entered promiscuous mode [ 366.772360][T14348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.797783][T14348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.869344][ T6041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.891026][T14348] team0: Port device team_slave_0 added [ 366.905733][T14348] team0: Port device team_slave_1 added [ 366.943832][T14348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.951409][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.977959][T14348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.000214][T14348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.007669][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.034179][T14348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.067631][ T6041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.168665][ T6041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.196602][T14348] hsr_slave_0: entered promiscuous mode [ 367.202866][T14348] hsr_slave_1: entered promiscuous mode [ 367.209483][T14348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.218033][T14348] Cannot create hsr debugfs directory [ 367.234156][T14365] chnl_net:caif_netlink_parms(): no params data found [ 367.282514][ T6041] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.414201][T14382] sctp: [Deprecated]: syz.0.2130 (pid 14382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.414201][T14382] Use struct sctp_sack_info instead [ 367.586172][ T5838] Bluetooth: hci2: command tx timeout [ 367.621967][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.632264][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.648027][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.648203][T14365] bridge_slave_0: entered allmulticast mode [ 367.662677][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.676472][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.684642][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.693162][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.699777][T14365] bridge_slave_0: entered promiscuous mode [ 367.785925][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.840202][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.890847][T14365] bridge_slave_1: entered allmulticast mode [ 367.936256][T14365] bridge_slave_1: entered promiscuous mode [ 368.145395][ T5838] Bluetooth: hci1: command tx timeout [ 368.252177][T14365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.420344][T14365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.600347][T14365] team0: Port device team_slave_0 added [ 368.671015][T14365] team0: Port device team_slave_1 added [ 368.680456][T14411] x_tables: unsorted entry at hook 2 [ 368.777221][T14410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.800245][T14365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.834884][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.880597][T14365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.951035][ T6041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.978251][T14365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.988237][T14418] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 368.995483][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.046684][T14365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.122905][ T6041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.245184][T14365] hsr_slave_0: entered promiscuous mode [ 369.251443][T14365] hsr_slave_1: entered promiscuous mode [ 369.262492][T14365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.271574][T14365] Cannot create hsr debugfs directory [ 369.294138][ T6041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.401452][T14435] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 369.426105][ T6041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.445878][T14431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2142'. [ 369.511095][T14440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2144'. [ 369.536071][T14435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.664886][ T5838] Bluetooth: hci2: command tx timeout [ 369.744501][ T5838] Bluetooth: hci4: command tx timeout [ 370.031453][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 370.034408][ T6041] bridge_slave_1: left allmulticast mode [ 370.046552][ T6041] bridge_slave_1: left promiscuous mode [ 370.052331][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.061383][ T6041] bridge_slave_0: left allmulticast mode [ 370.068390][ T6041] bridge_slave_0: left promiscuous mode [ 370.074129][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.084216][ T6041] bridge_slave_1: left allmulticast mode [ 370.090057][ T6041] bridge_slave_1: left promiscuous mode [ 370.097320][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.106727][ T6041] bridge_slave_0: left allmulticast mode [ 370.112470][ T6041] bridge_slave_0: left promiscuous mode [ 370.118543][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.229285][ T5838] Bluetooth: hci1: command tx timeout [ 370.593627][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.605485][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.616180][ T6041] bond0 (unregistering): Released all slaves [ 370.708876][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.719969][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.730185][ T6041] bond0 (unregistering): Released all slaves [ 370.875965][T14389] chnl_net:caif_netlink_parms(): no params data found [ 370.959245][T14348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.069111][T14348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.084162][T14348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.107430][T14479] netlink: 'syz.0.2151': attribute type 15 has an invalid length. [ 371.119489][T14348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.141180][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 371.445843][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.453091][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.469496][T14389] bridge_slave_0: entered allmulticast mode [ 371.479973][T14389] bridge_slave_0: entered promiscuous mode [ 371.492363][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.501230][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.509378][T14389] bridge_slave_1: entered allmulticast mode [ 371.517978][T14389] bridge_slave_1: entered promiscuous mode [ 371.705496][T14501] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 371.713344][T14501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2157'. [ 371.715166][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.742582][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.752085][ T5838] Bluetooth: hci2: command tx timeout [ 371.826291][ T5838] Bluetooth: hci4: command tx timeout [ 372.029903][T14389] team0: Port device team_slave_0 added [ 372.073992][T14389] team0: Port device team_slave_1 added [ 372.280044][ T6041] hsr_slave_0: left promiscuous mode [ 372.286314][ T6041] hsr_slave_1: left promiscuous mode [ 372.292221][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.299955][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.307559][ T5838] Bluetooth: hci1: command tx timeout [ 372.321519][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.329102][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.342681][ T6041] hsr_slave_0: left promiscuous mode [ 372.349756][ T6041] hsr_slave_1: left promiscuous mode [ 372.355985][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.363418][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.371445][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.379306][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.410143][ T6041] veth1_macvtap: left promiscuous mode [ 372.415797][ T6041] veth0_macvtap: left promiscuous mode [ 372.421373][ T6041] veth1_vlan: left promiscuous mode [ 372.427268][ T6041] veth0_vlan: left promiscuous mode [ 372.433743][ T6041] veth1_macvtap: left promiscuous mode [ 372.439442][ T6041] veth0_macvtap: left promiscuous mode [ 372.445209][ T6041] veth1_vlan: left promiscuous mode [ 372.450483][ T6041] veth0_vlan: left promiscuous mode [ 372.961230][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 373.006269][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 373.688621][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 373.727756][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 373.824490][ T5838] Bluetooth: hci2: command tx timeout [ 373.906368][ T5838] Bluetooth: hci4: command tx timeout [ 374.079550][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.088718][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.117771][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.130617][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.137720][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.164927][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.176605][T14365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.189858][T14365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.200934][T14514] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 374.203114][T14365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.238213][T14365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.421332][T14389] hsr_slave_0: entered promiscuous mode [ 374.438696][T14389] hsr_slave_1: entered promiscuous mode [ 374.452991][T14389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.474410][T14389] Cannot create hsr debugfs directory [ 374.603161][T14348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.721155][T14348] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.851063][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.858250][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.929606][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.936804][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.996980][T14548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2172'. [ 375.914618][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 375.997163][ T5838] Bluetooth: hci4: command tx timeout [ 376.531743][T14365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.560569][T14348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.627508][T14365] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.680911][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.688247][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.740867][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.748122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.923234][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.941695][T14389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.949981][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 376.980067][T14389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.011643][T14389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.039874][T14389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.141770][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.183516][T14584] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 377.196395][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 377.270882][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.306151][T14348] veth0_vlan: entered promiscuous mode [ 377.320752][T14587] GUP no longer grows the stack in syz.3.2184 (14587): 200000006000-20000000a000 (200000005000) [ 377.335276][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.3.2184 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 377.335299][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.335317][T14587] Call Trace: [ 377.335327][T14587] [ 377.335334][T14587] dump_stack_lvl+0x189/0x250 [ 377.335364][T14587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.335385][T14587] ? __pfx__printk+0x10/0x10 [ 377.335397][T14587] ? find_vma+0xe7/0x160 [ 377.335430][T14587] __get_user_pages+0x24e4/0x2a40 [ 377.335482][T14587] ? __pfx___get_user_pages+0x10/0x10 [ 377.335498][T14587] ? __gup_longterm_locked+0xbf7/0x15b0 [ 377.335516][T14587] ? down_read_killable+0x1d1/0x350 [ 377.335533][T14587] ? try_get_folio+0x633/0x660 [ 377.335554][T14587] __gup_longterm_locked+0xd66/0x15b0 [ 377.335579][T14587] ? try_grab_folio_fast+0x19a/0x4d0 [ 377.335610][T14587] ? gup_fast_fallback+0x1672/0x1d60 [ 377.335633][T14587] gup_fast_fallback+0x1843/0x1d60 [ 377.335688][T14587] ? __pfx_gup_fast_fallback+0x10/0x10 [ 377.335704][T14587] ? __mutex_lock+0x330/0xe80 [ 377.335755][T14587] ? is_valid_gup_args+0x11f/0x200 [ 377.335776][T14587] ? get_user_pages_fast+0x4d/0xb0 [ 377.335798][T14587] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 377.335826][T14587] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 377.335846][T14587] ? wait_for_space+0x24d/0x2d0 [ 377.335867][T14587] iov_iter_get_pages2+0x5e/0xa0 [ 377.335892][T14587] __se_sys_vmsplice+0x548/0x10e0 [ 377.335933][T14587] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 377.335952][T14587] ? __pfx_futex_wait+0x10/0x10 [ 377.335982][T14587] ? __lock_acquire+0xaac/0xd20 [ 377.336043][T14587] ? rcu_is_watching+0x15/0xb0 [ 377.336075][T14587] ? do_syscall_64+0xba/0x210 [ 377.336098][T14587] do_syscall_64+0xf6/0x210 [ 377.336117][T14587] ? clear_bhb_loop+0x45/0xa0 [ 377.336137][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.336158][T14587] RIP: 0033:0x7fd4c218e969 [ 377.336175][T14587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.336189][T14587] RSP: 002b:00007fd4c2f16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 377.336209][T14587] RAX: ffffffffffffffda RBX: 00007fd4c23b5fa0 RCX: 00007fd4c218e969 [ 377.336221][T14587] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 377.336231][T14587] RBP: 00007fd4c2210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 377.336242][T14587] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 377.336251][T14587] R13: 0000000000000000 R14: 00007fd4c23b5fa0 R15: 00007ffc1f50fec8 [ 377.336282][T14587] [ 377.407995][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.613238][T14590] xt_nat: multiple ranges no longer supported [ 377.631433][T14348] veth1_vlan: entered promiscuous mode [ 377.649787][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.656974][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.682430][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.690184][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.699571][T14590] veth0_to_team: left promiscuous mode [ 377.717514][T14365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.863356][T14348] veth0_macvtap: entered promiscuous mode [ 377.879910][T14596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2187'. [ 377.908245][T14348] veth1_macvtap: entered promiscuous mode [ 377.949441][T14596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2187'. [ 378.026127][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.078952][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.106949][T14365] veth0_vlan: entered promiscuous mode [ 378.141772][T14348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.177470][T14348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.186561][T14348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.196239][T14348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.209587][T14365] veth1_vlan: entered promiscuous mode [ 378.321154][T14365] veth0_macvtap: entered promiscuous mode [ 378.379033][T14365] veth1_macvtap: entered promiscuous mode [ 378.450033][T14365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.472634][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.492788][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.521762][T14365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.597953][T14365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.607467][T14365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.616972][T14365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.629909][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.637209][T14365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.689942][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.698686][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.722208][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.912606][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.956125][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.089136][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.129761][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.332642][T14657] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 379.342255][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 379.408592][T14657] netlink: 'syz.3.2197': attribute type 21 has an invalid length. [ 379.416973][T14657] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.519910][ T3450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.650000][ T3450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.748145][ T3450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.800905][T14389] veth0_vlan: entered promiscuous mode [ 379.819893][T14389] veth1_vlan: entered promiscuous mode [ 379.866645][ T3450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.952490][T14389] veth0_macvtap: entered promiscuous mode [ 379.968893][T14389] veth1_macvtap: entered promiscuous mode [ 380.012933][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.047782][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.085378][T14389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.094132][T14389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.117472][T14389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.126678][T14389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.211710][ T3450] bridge_slave_1: left allmulticast mode [ 380.218869][ T3450] bridge_slave_1: left promiscuous mode [ 380.229495][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.244257][ T3450] bridge_slave_0: left allmulticast mode [ 380.254221][ T3450] bridge_slave_0: left promiscuous mode [ 380.262520][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.353248][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.377788][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.388474][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.407861][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.425314][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.642295][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.653061][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.663074][ T3450] bond0 (unregistering): Released all slaves [ 380.803172][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.813126][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.906165][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.914126][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.003659][T14389] ------------[ cut here ]------------ [ 381.009862][T14389] refcount_t: underflow; use-after-free. [ 381.016589][T14389] WARNING: CPU: 1 PID: 14389 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 381.027234][T14389] Modules linked in: [ 381.031476][T14389] CPU: 1 UID: 0 PID: 14389 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 381.044450][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.054606][T14389] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 381.061170][T14389] Code: e0 86 c1 8b e8 47 a8 cb fc 90 0f 0b 90 90 eb d7 e8 eb 4b 07 fd c6 05 48 50 b0 0a 01 90 48 c7 c7 40 87 c1 8b e8 27 a8 cb fc 90 <0f> 0b 90 90 eb b7 e8 cb 4b 07 fd c6 05 25 50 b0 0a 01 90 48 c7 c7 [ 381.082502][T14389] RSP: 0018:ffffc9000439f7d8 EFLAGS: 00010246 [ 381.089323][T14389] RAX: bf4cc0e6d8d8fd00 RBX: 0000000000000003 RCX: ffff88802f3b1e00 [ 381.097984][T14389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 381.107067][T14389] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 381.115522][T14389] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880335e6000 [ 381.124656][T14389] R13: ffff88802d86f860 R14: ffff88802d86f878 R15: dffffc0000000000 [ 381.132660][T14389] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 381.142667][T14389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.149816][T14389] CR2: 00007ffc355a5980 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 381.158147][T14389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.166456][T14389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.174808][T14389] Call Trace: [ 381.178116][T14389] [ 381.181056][T14389] klist_dec_and_del+0x3c7/0x3d0 [ 381.186419][T14389] klist_remove+0x1bd/0x340 [ 381.190942][T14389] ? __pfx_klist_children_put+0x10/0x10 [ 381.196841][T14389] ? __pfx_klist_remove+0x10/0x10 [ 381.201892][T14389] ? __pfx_kobject_move+0x10/0x10 [ 381.207324][T14389] ? get_device_parent+0x366/0x3a0 [ 381.212456][T14389] device_move+0x193/0x700 [ 381.217286][T14389] hci_conn_del_sysfs+0xb8/0x170 [ 381.222681][T14389] hci_conn_del+0x8f5/0xca0 [ 381.227734][T14389] hci_conn_hash_flush+0x191/0x230 [ 381.232876][T14389] hci_dev_close_sync+0xaef/0x1330 [ 381.238886][T14389] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 381.245205][T14389] ? up_write+0x1c4/0x420 [ 381.249570][T14389] hci_unregister_dev+0x206/0x500 [ 381.254686][T14389] vhci_release+0x80/0xd0 [ 381.259023][T14389] ? __pfx_vhci_release+0x10/0x10 [ 381.264028][T14389] __fput+0x449/0xa70 [ 381.268302][T14389] task_work_run+0x1d1/0x260 [ 381.272914][T14389] ? __pfx_task_work_run+0x10/0x10 [ 381.278109][T14389] ? kmem_cache_free+0x192/0x3f0 [ 381.283057][T14389] do_exit+0x8d6/0x2550 [ 381.287285][T14389] ? __pfx_do_exit+0x10/0x10 [ 381.291886][T14389] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.297166][T14389] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.302380][T14389] do_group_exit+0x21c/0x2d0 [ 381.307096][T14389] __x64_sys_exit_group+0x3f/0x40 [ 381.312129][T14389] x64_sys_call+0x21ba/0x21c0 [ 381.316858][T14389] do_syscall_64+0xf6/0x210 [ 381.321373][T14389] ? clear_bhb_loop+0x45/0xa0 [ 381.326133][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.332848][T14389] RIP: 0033:0x7fc70218e969 [ 381.337994][T14389] Code: Unable to access opcode bytes at 0x7fc70218e93f. [ 381.345668][T14389] RSP: 002b:00007ffc355a7b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 381.354112][T14389] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc70218e969 [ 381.362170][T14389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 381.370195][T14389] RBP: 00007fc7021ee8f0 R08: 00007ffc355a58f7 R09: 0000000000000003 [ 381.378271][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.386358][T14389] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc355a7d10 [ 381.394402][T14389] [ 381.397453][T14389] Kernel panic - not syncing: kernel: panic_on_warn set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.404783][T14389] CPU: 1 UID: 0 PID: 14389 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 381.417039][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.427115][T14389] Call Trace: [ 381.430413][T14389] [ 381.433371][T14389] dump_stack_lvl+0x99/0x250 [ 381.437993][T14389] ? __asan_memcpy+0x40/0x70 [ 381.442608][T14389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.447830][T14389] ? __pfx__printk+0x10/0x10 [ 381.452438][T14389] panic+0x2db/0x790 [ 381.456339][T14389] ? __pfx_panic+0x10/0x10 [ 381.460767][T14389] __warn+0x31b/0x4b0 [ 381.464750][T14389] ? refcount_warn_saturate+0x11a/0x1d0 [ 381.470294][T14389] ? refcount_warn_saturate+0x11a/0x1d0 [ 381.475832][T14389] report_bug+0x2be/0x4f0 [ 381.480159][T14389] ? refcount_warn_saturate+0x11a/0x1d0 [ 381.485794][T14389] ? refcount_warn_saturate+0x11a/0x1d0 [ 381.491333][T14389] ? refcount_warn_saturate+0x11c/0x1d0 [ 381.496871][T14389] handle_bug+0x84/0x160 [ 381.501106][T14389] exc_invalid_op+0x1a/0x50 [ 381.505604][T14389] asm_exc_invalid_op+0x1a/0x20 [ 381.510443][T14389] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 381.516592][T14389] Code: e0 86 c1 8b e8 47 a8 cb fc 90 0f 0b 90 90 eb d7 e8 eb 4b 07 fd c6 05 48 50 b0 0a 01 90 48 c7 c7 40 87 c1 8b e8 27 a8 cb fc 90 <0f> 0b 90 90 eb b7 e8 cb 4b 07 fd c6 05 25 50 b0 0a 01 90 48 c7 c7 [ 381.536201][T14389] RSP: 0018:ffffc9000439f7d8 EFLAGS: 00010246 [ 381.542269][T14389] RAX: bf4cc0e6d8d8fd00 RBX: 0000000000000003 RCX: ffff88802f3b1e00 [ 381.550239][T14389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 381.558203][T14389] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 381.566167][T14389] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880335e6000 [ 381.574126][T14389] R13: ffff88802d86f860 R14: ffff88802d86f878 R15: dffffc0000000000 [ 381.582105][T14389] ? refcount_warn_saturate+0x119/0x1d0 [ 381.587652][T14389] klist_dec_and_del+0x3c7/0x3d0 [ 381.592591][T14389] klist_remove+0x1bd/0x340 [ 381.597087][T14389] ? __pfx_klist_children_put+0x10/0x10 [ 381.602627][T14389] ? __pfx_klist_remove+0x10/0x10 [ 381.607642][T14389] ? __pfx_kobject_move+0x10/0x10 [ 381.612658][T14389] ? get_device_parent+0x366/0x3a0 [ 381.617762][T14389] device_move+0x193/0x700 [ 381.622176][T14389] hci_conn_del_sysfs+0xb8/0x170 [ 381.627138][T14389] hci_conn_del+0x8f5/0xca0 [ 381.631646][T14389] hci_conn_hash_flush+0x191/0x230 [ 381.636757][T14389] hci_dev_close_sync+0xaef/0x1330 [ 381.641876][T14389] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 381.647414][T14389] ? up_write+0x1c4/0x420 [ 381.651748][T14389] hci_unregister_dev+0x206/0x500 [ 381.656776][T14389] vhci_release+0x80/0xd0 [ 381.661096][T14389] ? __pfx_vhci_release+0x10/0x10 [ 381.666282][T14389] __fput+0x449/0xa70 [ 381.670270][T14389] task_work_run+0x1d1/0x260 [ 381.674858][T14389] ? __pfx_task_work_run+0x10/0x10 [ 381.679961][T14389] ? kmem_cache_free+0x192/0x3f0 [ 381.684897][T14389] do_exit+0x8d6/0x2550 [ 381.689056][T14389] ? __pfx_do_exit+0x10/0x10 [ 381.693644][T14389] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.698833][T14389] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.704056][T14389] do_group_exit+0x21c/0x2d0 [ 381.708646][T14389] __x64_sys_exit_group+0x3f/0x40 [ 381.713666][T14389] x64_sys_call+0x21ba/0x21c0 [ 381.718337][T14389] do_syscall_64+0xf6/0x210 [ 381.722838][T14389] ? clear_bhb_loop+0x45/0xa0 [ 381.727514][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.733398][T14389] RIP: 0033:0x7fc70218e969 [ 381.737804][T14389] Code: Unable to access opcode bytes at 0x7fc70218e93f. [ 381.744812][T14389] RSP: 002b:00007ffc355a7b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 381.753217][T14389] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc70218e969 [ 381.761358][T14389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 381.769319][T14389] RBP: 00007fc7021ee8f0 R08: 00007ffc355a58f7 R09: 0000000000000003 [ 381.777282][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.785252][T14389] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc355a7d10 [ 381.793233][T14389] [ 381.796489][T14389] Kernel Offset: disabled [ 381.800806][T14389] Rebooting in 86400 seconds..