last executing test programs: 1.779313998s ago: executing program 4 (id=1647): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt(r0, 0x6, 0x0, &(0x7f0000000040)=""/234, &(0x7f0000000140)=0xea) 1.63154659s ago: executing program 1 (id=1649): syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004600003400000000000190780a010106ac1414aa07032b0008009078ac1414005d000001006400ff00890000ac1414bbac1414bb"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8, 0x8, 0x80000000, 0x1ff, {{0x27, 0x4, 0x2, 0x4, 0x9c, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @broadcast, {[@noop, @timestamp={0x44, 0x10, 0xbf, 0x0, 0x2, [0x5, 0x3, 0x3]}, @lsrr={0x83, 0x7, 0xe9, [@local]}, @rr={0x7, 0xb, 0x54, [@private=0xa010102, @rand_addr=0x64010100]}, @generic={0x44, 0x5, "031347"}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x7, [{@multicast2, 0x3}]}, @cipso={0x86, 0x53, 0x2, [{0x0, 0x5, "f33c9e"}, {0x6, 0xc, "085b2f06bad8368cf81b"}, {0x0, 0x6, "a29c5804"}, {0x7, 0xb, "feb7c652b2aad1c234"}, {0x6, 0x4, "c030"}, {0x86e79c22c59a3c1f, 0xd, "e340c262ccd59c7fefde96"}, {0x2, 0x2}, {0x5, 0xb, "15566a6e75e544681c"}, {0x0, 0xd, "fb96621d9555c789c87351"}]}]}}}}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)=@acquire={0x354, 0x17, 0x1ff, 0x70bd25, 0x25dfdbfe, {{@in6=@private1, 0x4d5, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4621, 0x81, 0x4e24, 0x1, 0xa, 0x20, 0x80, 0x29, r1, r3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@loopback, 0x4e21, 0xcf, 0x4e21, 0x7, 0xa, 0x60, 0xa0, 0x2c, r1, r4}, {0xf275, 0x8, 0x8, 0x0, 0x1, 0x8, 0x2}, {0x1, 0xfffffffffffffe01, 0x476b, 0x1}, 0x80, 0x6e6bbc, 0x3, 0x0, 0x2, 0x2}, 0xff, 0x9, 0x6, 0x70bd25}, [@sec_ctx={0xf1, 0x8, {0xed, 0x8, 0x1, 0x40, 0xe5, "b11a856b7c179e6fe5c73168c08b8ff11c8865550cbdf62e38a3f7fa9a8ac95143ce9887d374edb4e46f97aba1eb47904c56f17dcbce65e9f840aea5c8c53dc7a650330f190aeaefb6ebd729db13580191015ce6247ae13be6a1bebc66292d59c852936e3c51ccbab52c2a7c30e1a0fa83b717dff2018503eb297b2301b681a000d0f082dd2ba8e4db2f64257550a6003138419cafccc97cf0c537561c6c05e0e61373898a53230882b7e6dafed622d417505dd654e117c61fbcfa3c7b6116db61d3ca8ebb6ff456717fcff964864d84ec39b0f200c9546e73625306463587ec1d3a1dc2aa"}}, @algo_auth_trunc={0x137, 0x14, {{'sha512_mb\x00'}, 0x758, 0x180, "0c40ad969187a2eb4dc3994c727a02da4c29221f7f236f3d286918066cb1f6e9481518bcf97e08a808feed5aca74d0a663a6b9ad32cca9f712748cb3ad6b68969523e192fe57769e7f168ced1f20d1ad7e9100862c1d2ca455b9410411f4c21bdeed5d6a72abe37cd977dccff7f65e4812f4779780877888acda73632eaef82300bbc38ae9a99d04441b9fb6c955c5ddd9d9edaf9a980772cabb8376b5043d8975530c7f920e12a0e6f33ac68bd72b7c07f1315c9addae5ae07792bd61d1be8b9cefac5880ed9ed2ef5c4aacf152aee617c9cc19780ab05154c3ef42f9a897ee04cbf4240f181fbe9050ca"}}]}, 0x354}, 0x1, 0x0, 0x0, 0x4801}, 0x48000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x6, 0x3, 0x4e20, 0x0, 0xa, 0xa0, 0x20, 0xff, r1, r11}, {0x0, 0x4, 0x5, 0x1, 0x7fffffff, 0x10001, 0x8, 0x6}, {0xfb38, 0x3, 0xaa, 0x4}, 0x5cfcba8d, 0x6e6bb5, 0x2, 0x1, 0x1, 0x3}, {{@in=@private=0xa010102, 0x4d4, 0x33}, 0x0, @in6=@mcast2, 0x3506, 0x0, 0x2, 0xfc, 0xffffffff, 0x1ff, 0x7}}, 0xe8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000880)={{0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, {0xa, 0x4e20, 0x200, @mcast1, 0xffffffff}, 0x0, {[0x2, 0x3, 0x10000, 0x4, 0xbe3, 0x4, 0x101, 0x240]}}, 0x5c) r16 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r16, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01000000000000000000040000ff08000700e00000020800020000000000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.528093349s ago: executing program 4 (id=1652): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b04000000000000000002000000640004"], 0xb8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {0x0, 0x1f}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff9, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x70}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28ffff00"/20, @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b04000000000000000002000000640004"], 0xb8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {0x0, 0x1f}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff9, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x70}}, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28ffff00"/20, @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) (async) 1.479177344s ago: executing program 2 (id=1653): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=@newtaction={0x840, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}, {0x828, 0x1, [@m_ctinfo={0x108, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfffc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4b29}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0xbb, 0x6, "323609f7da98fe91ce90c511a0042dbe42acb8c5c2ea0c596a71aacb173ab3a6b7ed752fcabebd11d0239c1fc4f5939b08c8fc0ef3c16d11ab3fbb6d3beb2aa46ba63d88349912f9cd0eda1552c8423f3dca9b45ecd9688f31e563b3cdf93ea68c93ba938e5c8a2a0a911f7e3c53e45a531b2883dbc104a5195d7bf66edff4fd7bc73fed57a19bed998255518a277732a51239c4103b265a44cebeadad632b1bec543846a14ea989f556135f7f27f7f006f8a1aff51e85"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x128, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xec, 0x6, "e0a7a39652ad118adfe3345411c360f13d4a2c098ba3165265a6d12f4d19ba14e70060daa0c6c131b3d22e273aada079f819f9fbd0ba0ac6329465d86fd873dacdc26c749c2bc29194f794364c620da0f71653c35196c30205bbe0d8bf4e160719b31c33b7139e2e8ca18a48c72b0bdf0821abacca1d9adad554d12e4e7679be36a7bc4a2a1fc80ff31a373d00404c1804f0049546b9df2a5194869357d304cbc19e2eb2dc872ba3b0554e852a4605f778384d5d6e8e1b2b0bb3985e471e3672f1b50437f525f78485462cf3981d9c4aaa488f53d3c7042a47f0f48f7e701099c60259967e3c5296"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x50, 0x15, 0x0, 0x0, {{0x8}, {0x4}, {0x26, 0x6, "2e886f4f3f642f9bf350e3e2d371a0e4718c20cc75a1920d67d751bb11ae2aba94b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xd8, 0x5, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xb2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffff8, 0x9, 0x1, 0xfffffff0, 0x10}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}]}, {0x58, 0x6, "59e17b0abff35ca9687c129d63c65c954209209e5c1bd1415a2910acf3446d339ac8229947b76c211125a2a18d3347c034a25bebef3c13b7981da5067ff9fe6bd57ac4c56400203edff1d5b8c1b2659778458a5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}, @m_connmark={0xec, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x9, 0x2, 0x9, 0x10000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x1000000e, 0x2}, 0x96b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x39, 0x7, 0x401, 0x4}, 0x8}}]}, {0x66, 0x6, "70be52e7f25d04761c7291abc7490acf9ac2e98cd8f8c2cb15fa0aa6d1539a15339e6f7da070a5f534ce557aa7c8d8e41851496eb238f4643dc760703a65b015f8c2d1a240bee3dab4f758107f7715ef3ff375b8e002e4ab5725645b01dd6dddec40"}, {0xc, 0x7, {0x0, 0xed14e7d37e9aac2f}}, {0xc}}}, @m_csum={0xbc, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xf, 0x0, 0x2, 0x3}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x4, 0x800, 0x59efc773}, 0x3c}}]}, {0x58, 0x6, "e6b17393e24063f949b974d915b9c31bbc9bdd2ee8ff3eb65591f8aeee8ca023a2f3cda4df1fd9b1bae4bb6e02ea95b26a298826694d8421acc0d48f3a35057ea32bcdd987d031ee52d6d1e8571f4224bdceb52b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xc0, 0x6, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x2, 0x20000000, 0x3, 0x1ff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdc0}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x2, 0xffffffffffffffff, 0x3, 0x2}, 0x3}}]}, {0x53, 0x6, "2f01cf5196165d20c4e463ce7f142839497d05020b91eb09284a49b108c97bc43f10011ffda48b17b21b832fb04edbc9610eaabb4055de69d04108ae20c01d951412e95165767a8ef98686b2867041"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xf4, 0xf, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x555}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff01}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x75, 0x6, "fed3861c409883a3811dbe3a00847621d6b77beed5907a76aa6231b7a716e17227c4c98c65fa5181f79481fef300f7d0b4a82656f7734a6b9045f10a15f0ee916e486fa8042343e2cb900f29518992e565da5bff7f9bf85ac3c731a20ff423773dc742ec7a460d56cc9e0605c6c74464b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x170, 0xe, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0xfc, 0x6, "504378c06f7e428bcfc767fbb18754ba5f8c370154272cf020e8d51ddf4ef7700b5618cfd761dfc7d1fa47efb40c1ba72c426ba856c866b75027513392de5e85422abcfc2b6542b05528fe71165eedbb11543492c6cfa14b53aead275269b925a818e36558c19b0934509bf68f2821cc46e315e67c64619bd8d2388c977ee7e2beeda9077d4511785125f3da21b9cb4b08f3b6d8f18bf34ac54c07a4d99bb29234ab5efbdbfc96ceee54ab44b06103cd054f2c27eab18bc7e9f9a2ec2b40e20666648aec0c8924978538cbe29058fdbf0a03df5a243ea134e2c6c4a89e54f577c1c6bb80b6fd48fde4677caa4a2c578141b0b486810edfb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x840}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030000bb08000000df252a2873abdbbfbd6fbed7f4e3226525002536ddbf24", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x60080d0}, 0x200004c4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180600000000040000000000000000001812000099ac2a1dc57c8647c5c680072d036154f178d6d39246b4b1df37fa267b5454b16d2490072042c574a4246ce79fb86b6965d8d79fcca87a4a7b5b27ee9d0d8124a1493d18ea9ad7138d371a40468a9550060014dad0643ce5f8693981757013063aa9e2186aec44125ecf023638ca8be93152a2c6f2c41149b5bd29e05f9136dd3f051effe3d6510e6e3aa4f7ae2e046650834acfe8840f2301631901463771de16355bbe3f71f5543c599c92fcac424122", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000b857000000", @ANYRES32=r10, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018", @ANYRES64=r8], 0x50}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) recvfrom(r2, &(0x7f0000000c00)=""/35, 0x23, 0x32012, &(0x7f0000000c40)=@generic={0x2, "fc036852fbb565ef9265111a667fd9ab318fa4029d0eb1e2c8db453ee16d5ab50d519b1b4d2c545e8dead29a2b2da70d65e7bc2168de653ed527e853543e8eac7b6f1f4d673d95c41e2adf1367bb40a446f43f8e06c2588eb5a91632423f58c03325ddd6831f091a8fc235dacfc450004b841287c39ea8d712d891818726"}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r11) r12 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.379984812s ago: executing program 4 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1ce7ff0090ebc15be80ac5f0cc6b63be1e4feb530313492a895d04a82fe2caeb8fbab420cfd162c00680519fa573c9fd1db63bd921b70184cb3f5cafb82fe2496c6b5926fdd0c521d041f02a3b5911ec2ebe60305b536de103729c5d8d489e00000000000000000000000000000000da792d64a7a640b193d704bc4ab9a8ddf65e3ec5e80114cf26a2199d49c82ecea4c0472585e9f9", @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf257200000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/81, 0x51}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x20, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8915, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r4, &(0x7f0000000240), 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1ce7ff0090ebc15be80ac5f0cc6b63be1e4feb530313492a895d04a82fe2caeb8fbab420cfd162c00680519fa573c9fd1db63bd921b70184cb3f5cafb82fe2496c6b5926fdd0c521d041f02a3b5911ec2ebe60305b536de103729c5d8d489e00000000000000000000000000000000da792d64a7a640b193d704bc4ab9a8ddf65e3ec5e80114cf26a2199d49c82ecea4c0472585e9f9", @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf257200000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x4000) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/81, 0x51}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x20, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8915, 0x0) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bind$can_raw(r4, &(0x7f0000000240), 0x10) (async) 1.358731467s ago: executing program 3 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x28011, r0, 0x8a672000) 1.299702534s ago: executing program 0 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071101b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.178566714s ago: executing program 1 (id=1657): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x820) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.176870373s ago: executing program 0 (id=1658): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="040018"], 0x2c}}, 0x0) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x9, 0x6a8, 0xb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x6, {{0xc, 0x4, 0x3, 0x5, 0x30, 0x67, 0x0, 0xf, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x1b, 0x51, [@broadcast, @empty, @private=0xa010102, @private=0xa010100, @empty, @loopback]}]}}}}}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x78, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ceb02a1576"}, @NL80211_KEY_CIPHER={0x8}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x40408c1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x2b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7ae9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x4, 0x0, 0x8, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @fallback=0x31, r2, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x9, 0x80000000, 0x8}, 0x10, 0xffffffffffffffff, r7, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x1, 0x6, 0x5}], 0x10, 0x0, @void, @value}, 0x94) 1.070286476s ago: executing program 3 (id=1659): r0 = socket(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xa36, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 971.83679ms ago: executing program 2 (id=1660): syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000000000000000000017c1009c907801000000000000000b86c107cddd39d10e870794ae130f860174b07efe05336d54f519ebba5a2b265e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c"], 0x0) 969.786447ms ago: executing program 4 (id=1661): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20044881) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000040)}, 0xc090) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@union={0x10, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x8, 0x5, 0x6978}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x0, 0x0, 0x61, 0x0, 0x30, 0x0, 0x61]}}, &(0x7f00000001c0)=""/4096, 0x3c, 0x1000, 0x0, 0x80000000, 0x10000, @value=r1}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x61c, '\x00', r3, r4, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) 969.444535ms ago: executing program 1 (id=1662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x1e8, 0x22, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x1d8, 0x0, 0x0, 0x1, [@generic="f072f7093a35ecbf03efe60cf73d73eb80e020b1a1fb7c7cd61e91273b8577ac1fe793f99a31a1cd6499da41e471c799f592a0eece7e65eb77940ebb0bc5ac1315b28e1237f126f43bb6bf4ba1cfd8f452ef6bb230a31a793562bef1d5226462e29744bec2c7e2b5979d4c8bdf757e1c918ae64aa45c50175f633fad9dc1549bfc5b83ed96a2e9b505a424d4c9e15681013cf6bbc085a164ba001057ec323e7aa62c56c744102137063307d97792bb189a6d322cad195045eb58107c5baa155d27261051dd9bbf0e225727bb8d64f0a8af9d9f957e2a5216fc5db2b799ab928a343678", @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x1e8}], 0x1}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 918.229138ms ago: executing program 3 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x4, r1}, 0x10) 824.566875ms ago: executing program 0 (id=1664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x4, 0x1ff, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r4, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x1, 0xb}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x114}}, 0x4048010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 751.419699ms ago: executing program 2 (id=1665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="020ac4ff00000000711022f99f6852325a12a70000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x2) r3 = socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000140)={0x0, 0x7, [0x0, 0x1ff, 0xe, 0x3, 0x7fff, 0x2]}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x880, 0x6, 0x7ff, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x5, @void, @value, @void, @value}, 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@random="dbd3862a051d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x1c, 0x3, 0x0, 0x0, "019ac207bf7c23863c6c0e64a1cf23b7173feeee690a4e367cdb6e3587b45f39a821c1467bd3c1f5a7a3c87f311cc70376fa2513e7fb2c2a24bc2f2124d20a8d"}}}}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x3, 0x3e, 0x4, @vifc_lcl_ifindex=r1, @private=0xa010100}, 0x10) 750.103639ms ago: executing program 4 (id=1666): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="2c942d580f9dd7cb965618b5a8385a3f4f0000c60018009c4a6a4eab04e30610724a69886065f268a9fa59009b29096c53b7373ce479affc4f0c916741fa46b7c8fcf0315741b97bc30b20", 0xfffffffffffffed0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="2c942d580f9dd7cb965618b5a8385a3f4f0000c60018009c4a6a4eab04e30610724a69886065f268a9fa59009b29096c53b7373ce479affc4f0c916741fa46b7c8fcf0315741b97bc30b20", 0xfffffffffffffed0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x7, 0x3}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="6e3ab4ba67fb08bf6990c11291b10f039b11340d2eed06b1e4c3b2dbff74b9867e21cee501b8cce8bd3dcd9282ab0b913c45c4c9523d6c8e80fdee7b0d8ff32d6ec785577ac9e845a76ae0959dd3f413218059ba9d9b33e9ef80b3e4f1358af348917425f0c3d3608e25b71af30e22e734119ccabe8197684f73f5498d3277bca7f08901b6b52fed56a37544f9f53e63eff05fb239454c1c362f4946730fad8222887ea8e4bd2562f8edfca1f54b0938243659f89bb9db089d3596e4b095e335e5170c6f68eb6eb42890e0b530b155ec60bafbe1840438ab24dd1d60615b9262ececd3efd25bd9", 0xe7) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}}], 0x2, 0x10, 0x0) 749.402483ms ago: executing program 1 (id=1667): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 744.739275ms ago: executing program 3 (id=1668): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff010000000000400000000000000001140006000000000065000000000000000000000008000b"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf259250e2c408000300", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x21, 0x1, 0xfffffff8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r7}, 0x10) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r9, r8, 0x0, 0x16, 0xfffffffffffffffe}, 0x30) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newneigh={0x2c, 0x1c, 0x300, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0xe68b11293b8a925e, 0x53, 0x8}, [@NDA_FLAGS_EXT={0x8}, @NDA_FLAGS_EXT={0x8}]}, 0x2c}}, 0x4004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x8) r12 = socket$xdp(0x2c, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000380)=""/186, 0x1316000, 0x1000, 0xe2, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000001c0)={r11, 0x80000001}, &(0x7f0000000340)=0x8) 564.230067ms ago: executing program 1 (id=1669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "197d25ab5c6cdbf01fe39863eb62f49000c3d6942a5e686ea59618aa7c984968", "12d234da810a504a6b0a4166eccca2e766c504479ebb08d334b334ee3d90b5ae5e1f8578858cec6b7f0937827e16b047", "3cec384575ba47e50f91fcc0eafcc824113d3c52b65c89357f4f3052", {"bd88a81b8301690b4baa4a55f96f03f3", "cc13d82e7d8ecbb5d90a4000d1d2d556"}}}}}}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2c0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3, 0x20}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 523.421796ms ago: executing program 3 (id=1670): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdc00, 0x4ab669aa81b7790c}, 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8804100", @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000a0000"], 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044894) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a8020000125e8b25cfa02d7932d7f8babe4b5485298d611b566274ac456a5ddf7c5f957980fcb5c313babcee5c3b0a6ee2c91f29ecdee6713d42fb1aff8cac434345adfe6eac3c5e605031646a77920fbe720ea6c602b1233bfbeb2062d61e745225d924d7bc003d71b661630f243ec833aa3b2640a272064bb2bb59ca1eb43e326138c341ad4ddda37ae47e3ff685b8", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf250a000000"], 0xfffffec3}, 0x1, 0x0, 0x0, 0x40}, 0x4040045) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2604002c) 475.58026ms ago: executing program 0 (id=1671): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 397.683637ms ago: executing program 2 (id=1672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x194) getsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f00000001c0)=""/231, &(0x7f0000000040)=0xe7) 365.509401ms ago: executing program 0 (id=1673): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 299.645015ms ago: executing program 1 (id=1674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400bf75", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c4c4000000000000000000850000003e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x90) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) 239.469116ms ago: executing program 4 (id=1675): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xe, 0xfd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x6a, 0x10, 0x0, &(0x7f0000000080)) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)={r10}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r11}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 183.452426ms ago: executing program 2 (id=1676): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8001, 0xe, 0x7, 0x100, 0x7ff}) r1 = accept4(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80800) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x4, @multicast, 'netpci0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 56.232755ms ago: executing program 0 (id=1677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, 0x0, 0x0) socketpair(0x28, 0x2, 0x78, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0xa0, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc76}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd3ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x6, 0x10000, 0x1, 0xa1f83b9, 0x7}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x5, 0x4, 0x800c, 0x101, 0xbdb8, 0x5, 0x7, 0x5, r5}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x88, r6, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf, 0x40}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044}, 0x8050) (async, rerun: 32) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) bind$llc(r10, &(0x7f0000000080)={0x1a, 0x302, 0x5, 0x3, 0x3, 0x8, @local}, 0x10) (async) sendmmsg(r4, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) 52.851422ms ago: executing program 3 (id=1678): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000001340)={0x11, @remote, 0xffff, 0x0, 'wrr\x00'}, 0x2c) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000003740)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @empty}, 'macvtap0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x10040000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0x1, 0x6}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 0s ago: executing program 2 (id=1679): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x1, 0xc, 0x0, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r2}, 0x10) socket$netlink(0x10, 0x3, 0xa) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 83.018465][ T5823] cgroup: Unknown subsys name 'net' [ 83.138362][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.147840][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.877838][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.208334][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.217290][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.232753][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.242357][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.250718][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.258815][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.275681][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.285695][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.294092][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.296895][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.305143][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.310025][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.316162][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.323520][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.330327][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.338041][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.346242][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.361671][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.369085][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.384747][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.395945][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.412112][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.414631][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.419971][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.437179][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.026923][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 90.271380][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.341268][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 90.427753][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.439034][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.469914][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.477813][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.485671][ T5835] bridge_slave_0: entered allmulticast mode [ 90.493166][ T5835] bridge_slave_0: entered promiscuous mode [ 90.532383][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.540113][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.547484][ T5835] bridge_slave_1: entered allmulticast mode [ 90.554821][ T5835] bridge_slave_1: entered promiscuous mode [ 90.693849][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.718824][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.726469][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.733651][ T5837] bridge_slave_0: entered allmulticast mode [ 90.742758][ T5837] bridge_slave_0: entered promiscuous mode [ 90.764429][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.772145][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.779586][ T5853] bridge_slave_0: entered allmulticast mode [ 90.787648][ T5853] bridge_slave_0: entered promiscuous mode [ 90.796490][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.803588][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.811439][ T5853] bridge_slave_1: entered allmulticast mode [ 90.818850][ T5853] bridge_slave_1: entered promiscuous mode [ 90.829125][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.850961][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.858587][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.866329][ T5837] bridge_slave_1: entered allmulticast mode [ 90.873635][ T5837] bridge_slave_1: entered promiscuous mode [ 91.000578][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.008366][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.015720][ T5841] bridge_slave_0: entered allmulticast mode [ 91.022823][ T5841] bridge_slave_0: entered promiscuous mode [ 91.036706][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.048762][ T5835] team0: Port device team_slave_0 added [ 91.058698][ T5835] team0: Port device team_slave_1 added [ 91.067552][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.080572][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.102853][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.110346][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.117876][ T5841] bridge_slave_1: entered allmulticast mode [ 91.125310][ T5841] bridge_slave_1: entered promiscuous mode [ 91.134495][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.255677][ T5837] team0: Port device team_slave_0 added [ 91.261944][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.269377][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.276704][ T5838] bridge_slave_0: entered allmulticast mode [ 91.283836][ T5838] bridge_slave_0: entered promiscuous mode [ 91.309062][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.322621][ T5853] team0: Port device team_slave_0 added [ 91.329578][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.337646][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.363934][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.377812][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.384980][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.411556][ T5855] Bluetooth: hci0: command tx timeout [ 91.417145][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.430373][ T5837] team0: Port device team_slave_1 added [ 91.451076][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458759][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.466038][ T5838] bridge_slave_1: entered allmulticast mode [ 91.473306][ T5838] bridge_slave_1: entered promiscuous mode [ 91.480288][ T5855] Bluetooth: hci3: command tx timeout [ 91.485175][ T5855] Bluetooth: hci1: command tx timeout [ 91.486014][ T51] Bluetooth: hci4: command tx timeout [ 91.496950][ T5850] Bluetooth: hci2: command tx timeout [ 91.510585][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.522086][ T5853] team0: Port device team_slave_1 added [ 91.609279][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.616331][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.642838][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.657649][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.664908][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.690935][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.705051][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.731040][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.738246][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.764825][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.784365][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.791769][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.817804][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.831687][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.871908][ T5841] team0: Port device team_slave_0 added [ 91.881548][ T5841] team0: Port device team_slave_1 added [ 91.961168][ T9] cfg80211: failed to load regulatory.db [ 91.977267][ T5838] team0: Port device team_slave_0 added [ 91.989597][ T5835] hsr_slave_0: entered promiscuous mode [ 91.997451][ T5835] hsr_slave_1: entered promiscuous mode [ 92.005706][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.012673][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.038706][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.050923][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.058049][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.084417][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.117705][ T5853] hsr_slave_0: entered promiscuous mode [ 92.124098][ T5853] hsr_slave_1: entered promiscuous mode [ 92.130471][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.138822][ T5853] Cannot create hsr debugfs directory [ 92.146703][ T5838] team0: Port device team_slave_1 added [ 92.263247][ T5837] hsr_slave_0: entered promiscuous mode [ 92.270418][ T5837] hsr_slave_1: entered promiscuous mode [ 92.277291][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.285191][ T5837] Cannot create hsr debugfs directory [ 92.291482][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.298508][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.324843][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.338496][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.345684][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.372567][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.463446][ T5841] hsr_slave_0: entered promiscuous mode [ 92.470754][ T5841] hsr_slave_1: entered promiscuous mode [ 92.477340][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.484977][ T5841] Cannot create hsr debugfs directory [ 92.707818][ T5838] hsr_slave_0: entered promiscuous mode [ 92.714377][ T5838] hsr_slave_1: entered promiscuous mode [ 92.721174][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.728898][ T5838] Cannot create hsr debugfs directory [ 93.103025][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.131737][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.142493][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.163072][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.222001][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.238042][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.249283][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.262059][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.379660][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.392764][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.412321][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.422362][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.475276][ T51] Bluetooth: hci0: command tx timeout [ 93.531777][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.556680][ T51] Bluetooth: hci1: command tx timeout [ 93.562581][ T51] Bluetooth: hci4: command tx timeout [ 93.564795][ T5850] Bluetooth: hci3: command tx timeout [ 93.568193][ T51] Bluetooth: hci2: command tx timeout [ 93.581451][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.618587][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.630232][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.730513][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.753120][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.777621][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.804248][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.823255][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.842200][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.849632][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.860446][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.887342][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.904199][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.911336][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.950132][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.017818][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.042332][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.049540][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.063134][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.100054][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.107307][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.119969][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.127103][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.157463][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.164734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.296398][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.360791][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.461687][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.468895][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.499003][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.562294][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.569634][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.621155][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.670369][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.791405][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.851572][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.858853][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.910873][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.918146][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.082600][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.100520][ T5835] veth0_vlan: entered promiscuous mode [ 95.127313][ T5835] veth1_vlan: entered promiscuous mode [ 95.189318][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.363214][ T5835] veth0_macvtap: entered promiscuous mode [ 95.388492][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.409871][ T5841] veth0_vlan: entered promiscuous mode [ 95.430466][ T5835] veth1_macvtap: entered promiscuous mode [ 95.460876][ T5841] veth1_vlan: entered promiscuous mode [ 95.534115][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.568828][ T51] Bluetooth: hci0: command tx timeout [ 95.611020][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.635959][ T51] Bluetooth: hci2: command tx timeout [ 95.636441][ T5855] Bluetooth: hci3: command tx timeout [ 95.641392][ T51] Bluetooth: hci4: command tx timeout [ 95.647496][ T5850] Bluetooth: hci1: command tx timeout [ 95.709885][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.721195][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730536][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739564][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790931][ T5853] veth0_vlan: entered promiscuous mode [ 95.806201][ T5841] veth0_macvtap: entered promiscuous mode [ 95.831780][ T5841] veth1_macvtap: entered promiscuous mode [ 95.851846][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.890136][ T5853] veth1_vlan: entered promiscuous mode [ 95.991282][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.022549][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.031749][ T5853] veth0_macvtap: entered promiscuous mode [ 96.044096][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.053045][ T5837] veth0_vlan: entered promiscuous mode [ 96.070182][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.082609][ T5838] veth0_vlan: entered promiscuous mode [ 96.116469][ T5853] veth1_macvtap: entered promiscuous mode [ 96.141834][ T5838] veth1_vlan: entered promiscuous mode [ 96.151975][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.162834][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171942][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180838][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192662][ T5837] veth1_vlan: entered promiscuous mode [ 96.213901][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.222561][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.257326][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.313132][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.363853][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.371290][ T5838] veth0_macvtap: entered promiscuous mode [ 96.403597][ T5837] veth0_macvtap: entered promiscuous mode [ 96.416371][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.432891][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.445608][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.455868][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.493123][ T5837] veth1_macvtap: entered promiscuous mode [ 96.531774][ T5838] veth1_macvtap: entered promiscuous mode [ 96.601472][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.609663][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.743034][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.769526][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.778234][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.789582][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.803342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.813859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837486][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.852939][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.870039][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.897765][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.920119][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.008925][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.032865][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.042262][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.051767][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.112621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.130859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.297447][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.320121][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.394065][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.416338][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.529859][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.539979][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.553374][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.585803][ T5973] xt_socket: unknown flags 0x2 [ 97.602012][ T5977] 8021q: VLANs not supported on sit0 [ 97.636260][ T5850] Bluetooth: hci0: command tx timeout [ 97.672427][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.697238][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.710167][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.715838][ T5850] Bluetooth: hci1: command tx timeout [ 97.723547][ T5855] Bluetooth: hci3: command tx timeout [ 97.729219][ T5844] Bluetooth: hci4: command tx timeout [ 97.730189][ T51] Bluetooth: hci2: command tx timeout [ 97.749534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.833499][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.866071][ T5981] netlink: 'syz.0.10': attribute type 7 has an invalid length. [ 97.876727][ T5981] netlink: 'syz.0.10': attribute type 8 has an invalid length. [ 97.894723][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.970157][ T5981] gretap0: entered promiscuous mode [ 97.985232][ T5981] gretap0: left promiscuous mode [ 98.086289][ T5983] x_tables: duplicate underflow at hook 1 [ 98.305242][ T5987] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 98.580326][ T5993] Zero length message leads to an empty skb [ 98.723392][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 98.803177][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 99.127844][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.179065][ T6014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.263808][ T6025] IPv6: NLM_F_REPLACE set, but no existing node found! [ 99.306520][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.498837][ T6037] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 99.865827][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 99.884153][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 99.922024][ T6035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.28'. [ 99.985472][ T6045] veth3: entered promiscuous mode [ 100.286476][ T6058] pim6reg1: entered promiscuous mode [ 100.296010][ T6058] pim6reg1: entered allmulticast mode [ 100.835046][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 100.865847][ T6086] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.877285][ T6081] xt_CT: No such helper "pptp" [ 100.906131][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 101.159124][ T6090] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 101.637903][ T6117] team0: Device gtp0 is of different type [ 101.749768][ T6120] team0: No ports can be present during mode change [ 103.010199][ T6168] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.219314][ T6174] warning: `syz.0.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.462009][ T6183] __nla_validate_parse: 7 callbacks suppressed [ 103.462031][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 103.842899][ T6203] tun0: tun_chr_ioctl cmd 1074025675 [ 103.861618][ T6203] tun0: persist disabled [ 103.893310][ T6203] Bluetooth: MGMT ver 1.23 [ 103.909895][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 103.945440][ T6208] netlink: 'syz.2.82': attribute type 11 has an invalid length. [ 104.527770][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 104.882284][ T6251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.97'. [ 105.012772][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 105.228017][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 105.526534][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 105.552764][ T6275] netlink: 'syz.0.102': attribute type 33 has an invalid length. [ 105.601707][ T6275] netlink: 152 bytes leftover after parsing attributes in process `syz.0.102'. [ 105.815826][ T6291] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 106.085249][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.094103][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.823508][ T6315] veth3: entered allmulticast mode [ 106.895775][ T6332] xfrm1: entered promiscuous mode [ 106.912229][ T6332] xfrm1: entered allmulticast mode [ 108.670409][ T6385] sctp: [Deprecated]: syz.3.130 (pid 6385) Use of int in maxseg socket option. [ 108.670409][ T6385] Use struct sctp_assoc_value instead [ 109.436816][ T6375] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 109.449715][ T6378] tipc: Enabling of bearer rejected, failed to enable media [ 109.705796][ T6397] __nla_validate_parse: 7 callbacks suppressed [ 109.705818][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.745089][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.780393][ T6401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.136'. [ 109.802556][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.827926][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 109.842686][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 109.892181][ T6406] netlink: 188 bytes leftover after parsing attributes in process `syz.1.137'. [ 110.331520][ T6426] sctp: [Deprecated]: syz.3.143 (pid 6426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.331520][ T6426] Use struct sctp_sack_info instead [ 110.426419][ T6422] can: request_module (can-proto-0) failed. [ 110.496965][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 110.649948][ T6443] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.148'. [ 110.921509][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 111.060416][ T6465] netlink: 'syz.1.149': attribute type 83 has an invalid length. [ 111.641742][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.682057][ T6484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.695834][ T6487] syz_tun: entered allmulticast mode [ 112.256291][ T6486] syz_tun: left allmulticast mode [ 112.591339][ T6522] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 113.717062][ T6571] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.737289][ T6571] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.749673][ T6571] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.767610][ T6571] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.785648][ T6571] geneve2: entered promiscuous mode [ 113.792135][ T6571] geneve2: entered allmulticast mode [ 113.797741][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c5800: rx timeout, send abort [ 113.807240][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c6000: rx timeout, send abort [ 113.913838][ T6578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.156741][ T5953] IPVS: starting estimator thread 0... [ 114.298405][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c5800: abort rx timeout. Force session deactivation [ 114.309794][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591c6000: abort rx timeout. Force session deactivation [ 114.314851][ T6590] IPVS: using max 28 ests per chain, 67200 per kthread [ 114.383917][ T30] audit: type=1804 audit(1750739737.272:2): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.192" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=241 res=1 errno=0 [ 114.480786][ T30] audit: type=1800 audit(1750739737.272:3): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="cgroup.controllers" dev="tmpfs" ino=241 res=0 errno=0 [ 114.893879][ T6618] __nla_validate_parse: 39 callbacks suppressed [ 114.893899][ T6618] netlink: 68 bytes leftover after parsing attributes in process `syz.3.199'. [ 115.465396][ T6642] netlink: 256 bytes leftover after parsing attributes in process `syz.3.207'. [ 115.503225][ T6642] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 115.557228][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 115.563034][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 115.591692][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 115.862787][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.210'. [ 116.189434][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 116.215008][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 116.477050][ T6683] bridge0: port 3(batadv1) entered blocking state [ 116.505244][ T6683] bridge0: port 3(batadv1) entered disabled state [ 116.536540][ T6683] batadv1: entered allmulticast mode [ 116.557471][ T6683] batadv1: entered promiscuous mode [ 116.564535][ T6687] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 116.608346][ T6691] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 116.853838][ T6698] netlink: 'syz.0.223': attribute type 5 has an invalid length. [ 116.972058][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 116.983173][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 117.169338][ T6729] netlink: 96 bytes leftover after parsing attributes in process `syz.2.232'. [ 117.685920][ T6750] sctp: [Deprecated]: syz.1.238 (pid 6750) Use of int in max_burst socket option. [ 117.685920][ T6750] Use struct sctp_assoc_value instead [ 117.816802][ T6756] netlink: 156 bytes leftover after parsing attributes in process `syz.4.242'. [ 118.019408][ T6762] tipc: Can't bind to reserved service type 2 [ 118.193334][ T6777] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 120.309408][ T6869] __nla_validate_parse: 8 callbacks suppressed [ 120.309427][ T6869] netlink: 204 bytes leftover after parsing attributes in process `syz.4.273'. [ 120.429189][ T6873] netlink: 164 bytes leftover after parsing attributes in process `syz.3.275'. [ 120.525669][ T6870] netlink: 165 bytes leftover after parsing attributes in process `syz.1.271'. [ 120.689782][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.698280][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.794320][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 120.831046][ T6891] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.851285][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.280'. [ 121.170897][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 121.316099][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 121.484128][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 122.014144][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 122.039891][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'. [ 122.263713][ T6955] syz.1.297 uses old SIOCAX25GETINFO [ 122.519196][ T6966] SET target dimension over the limit! [ 122.988597][ T6980] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 122.996902][ T6980] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 123.004794][ T6980] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 123.012571][ T6980] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 123.022570][ T6980] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 123.059675][ T6986] pim6reg: entered allmulticast mode [ 123.110538][ T6986] pim6reg: left allmulticast mode [ 123.317742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.314950][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 125.852801][ T7060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.059937][ T7065] bridge_slave_0: left allmulticast mode [ 126.076941][ T7065] bridge_slave_0: left promiscuous mode [ 126.123143][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.166758][ T7065] bridge_slave_1: left allmulticast mode [ 126.172492][ T7065] bridge_slave_1: left promiscuous mode [ 126.212483][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.299582][ T7065] bond0: (slave bond_slave_0): Releasing backup interface [ 126.324431][ T7065] bond0: (slave bond_slave_1): Releasing backup interface [ 126.363072][ T7065] team0: Port device team_slave_0 removed [ 126.379075][ T7065] team0: Port device team_slave_1 removed [ 126.386656][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.394267][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.407344][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.416158][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.463169][ T7077] vlan0: entered promiscuous mode [ 126.486842][ T7077] team0: Port device vlan0 added [ 126.531760][ T7081] tipc: Started in network mode [ 126.551166][ T7081] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 126.609140][ T7081] tipc: Enabled bearer , priority 0 [ 126.639569][ T7077] syz.0.332 (7077) used greatest stack depth: 19800 bytes left [ 126.743028][ T7088] __nla_validate_parse: 4 callbacks suppressed [ 126.743047][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'. [ 127.254891][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 127.462388][ T7113] can: request_module (can-proto-3) failed. [ 127.473403][ T7119] veth0: entered promiscuous mode [ 127.494472][ T7119] veth0: entered allmulticast mode [ 127.563026][ T7121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.742817][ T5952] tipc: Node number set to 11578026 [ 127.779268][ T7130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.345'. [ 127.818784][ T7131] smc: net device erspan0 applied user defined pnetid SYZ0 [ 127.861855][ T7133] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 128.150822][ T7143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.350'. [ 128.161031][ T7139] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 128.168069][ T7144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.350'. [ 128.363847][ T7149] SET target dimension over the limit! [ 128.407630][ T7152] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 128.867069][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 129.560328][ T7189] netlink: 51 bytes leftover after parsing attributes in process `syz.0.364'. [ 130.584276][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 131.029191][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 131.057239][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 131.319673][ T7210] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 131.343768][ T7211] tipc: Started in network mode [ 131.355955][ T7211] tipc: Node identity 4, cluster identity 4711 [ 131.362910][ T7211] tipc: Node number set to 4 [ 131.397537][ T7214] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 131.416936][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.700153][ T7225] syzkaller0: entered promiscuous mode [ 131.709909][ T7225] syzkaller0: entered allmulticast mode [ 132.008930][ T7245] __nla_validate_parse: 2 callbacks suppressed [ 132.008950][ T7245] netlink: 196 bytes leftover after parsing attributes in process `syz.0.383'. [ 132.185693][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 132.579049][ T7256] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 132.927868][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934519][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.433118][ T7256] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 133.718767][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 134.179879][ T7290] tipc: Enabled bearer , priority 0 [ 134.315252][ T7288] tipc: Disabling bearer [ 134.352583][ T7302] netlink: 'syz.0.399': attribute type 33 has an invalid length. [ 134.368166][ T7302] tipc: Resetting bearer [ 134.507816][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 134.866958][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 135.368879][ T7349] xt_l2tp: v2 sid > 0xffff: 262144 [ 135.387888][ T7350] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 135.528192][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.414'. [ 135.858468][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.422'. [ 136.127920][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 136.146050][ T7387] netlink: 52 bytes leftover after parsing attributes in process `syz.2.426'. [ 136.155061][ T7388] netlink: 224 bytes leftover after parsing attributes in process `syz.4.425'. [ 136.702901][ T5925] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 136.763626][ T5925] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 136.794100][ T7417] unsupported nlmsg_type 40 [ 137.143872][ T7425] syzkaller1: entered promiscuous mode [ 137.192923][ T7425] syzkaller1: entered allmulticast mode [ 137.240534][ T7431] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 137.290258][ T7431] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 137.559373][ T7437] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 137.574841][ T7450] __nla_validate_parse: 5 callbacks suppressed [ 137.574860][ T7450] netlink: 244 bytes leftover after parsing attributes in process `syz.3.442'. [ 137.980046][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 138.904441][ T5905] IPVS: starting estimator thread 0... [ 138.922348][ T7504] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.064745][ T7514] IPVS: using max 31 ests per chain, 74400 per kthread [ 139.212649][ T30] audit: type=1804 audit(1750739762.112:4): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.458" name="/newroot/81/cgroup.controllers" dev="tmpfs" ino=426 res=1 errno=0 [ 139.334678][ T30] audit: type=1800 audit(1750739762.112:5): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="cgroup.controllers" dev="tmpfs" ino=426 res=0 errno=0 [ 139.711184][ T7546] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:20002 [ 139.787330][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.852815][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.866180][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 139.971431][ T7558] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 140.525060][ T7576] : renamed from veth0_vlan (while UP) [ 140.570674][ T7580] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 140.642196][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 140.701587][ T7595] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 140.721300][ T7580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.806504][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 140.826072][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 140.900209][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.476'. [ 140.980148][ T7598] bond3: (slave veth5): Enslaving as an active interface with a down link [ 141.284433][ T7615] openvswitch: netlink: IPv4 tun info is not correct [ 141.849287][ T7645] team0: Device gtp0 is of different type [ 142.025625][ T7649] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 142.027249][ T7648] gtp0: entered promiscuous mode [ 142.039870][ T7648] gtp0: entered allmulticast mode [ 142.081096][ T7649] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 142.103109][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 142.148135][ T7648] bridge: RTM_NEWNEIGH with invalid ether address [ 142.245790][ T7658] bridge0: port 4(vlan2) entered blocking state [ 142.271998][ T7658] bridge0: port 4(vlan2) entered disabled state [ 142.283041][ T7658] vlan2: entered allmulticast mode [ 142.288698][ T7658] bridge0: entered allmulticast mode [ 142.299741][ T7658] vlan2: left allmulticast mode [ 142.308742][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'. [ 142.314748][ T7658] bridge0: left allmulticast mode [ 142.599850][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 142.612115][ T7667] netlink: 'syz.3.499': attribute type 1 has an invalid length. [ 142.808358][ T7676] netlink: 'syz.3.501': attribute type 2 has an invalid length. [ 142.841860][ T7680] tipc: New replicast peer: 0.0.0.0 [ 142.853278][ T7676] netlink: 'syz.3.501': attribute type 2 has an invalid length. [ 142.865285][ T7680] tipc: Enabled bearer , priority 10 [ 143.310939][ T7692] openvswitch: netlink: IP tunnel dst address not specified [ 143.362173][ T7695] netlink: 'syz.2.508': attribute type 11 has an invalid length. [ 143.369691][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 143.889080][ T7712] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 143.912855][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 143.983591][ T7715] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 144.016448][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 144.142285][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.149621][ T7725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.158079][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.165353][ T7725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.213193][ T7725] bridge0: entered allmulticast mode [ 144.226119][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 144.284670][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 144.401425][ T7732] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.517'. [ 144.641188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 144.653626][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected! [ 144.766255][ T7745] pimreg: entered allmulticast mode [ 144.828662][ T7745] pimreg: left allmulticast mode [ 144.947394][ T7760] netlink: 256 bytes leftover after parsing attributes in process `syz.4.526'. [ 145.327089][ T7772] netlink: 48 bytes leftover after parsing attributes in process `syz.3.530'. [ 145.808394][ T7789] delete_channel: no stack [ 145.950110][ T7792] netlink: 44 bytes leftover after parsing attributes in process `syz.3.536'. [ 146.269722][ T7808] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 146.965404][ T7834] netlink: 'syz.2.548': attribute type 12 has an invalid length. [ 147.374467][ T7852] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 147.417289][ T7856] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 147.734010][ T7864] netlink: 'syz.4.558': attribute type 6 has an invalid length. [ 147.770384][ T7872] syz_tun: entered allmulticast mode [ 147.788982][ T7860] syz.1.554 (7860) used greatest stack depth: 19032 bytes left [ 147.906703][ T7868] batman_adv: batadv0: Adding interface: dummy0 [ 147.912998][ T7868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.955592][ T7868] batman_adv: batadv0: Interface activated: dummy0 [ 148.042226][ T7872] batadv0: mtu less than device minimum [ 148.087895][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.100233][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.112466][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.124848][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.137139][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.149329][ T7872] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.303106][ T7867] syz_tun: left allmulticast mode [ 148.394132][ T7836] __nla_validate_parse: 2 callbacks suppressed [ 148.394154][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 148.573916][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 148.602546][ T7905] gtp1: entered promiscuous mode [ 148.605311][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 148.655183][ T7905] gtp1: entered allmulticast mode [ 148.695450][ T7903] erspan0: entered promiscuous mode [ 148.716221][ T7903] batadv_slave_1: entered promiscuous mode [ 148.957827][ T7916] netlink: 'syz.4.571': attribute type 178 has an invalid length. [ 149.007362][ T7910] netlink: 'syz.1.569': attribute type 12 has an invalid length. [ 149.333586][ T7928] sctp: [Deprecated]: syz.0.575 (pid 7928) Use of int in maxseg socket option. [ 149.333586][ T7928] Use struct sctp_assoc_value instead [ 149.380329][ T7922] veth1_macvtap: left promiscuous mode [ 149.429961][ T7922] macsec0: entered promiscuous mode [ 149.447469][ T7922] macsec0: entered allmulticast mode [ 150.196261][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 150.310828][ T7921] veth1_macvtap: entered promiscuous mode [ 150.317821][ T7921] veth1_macvtap: entered allmulticast mode [ 150.333842][ T7921] macsec0: left promiscuous mode [ 150.352530][ T7921] macsec0: left allmulticast mode [ 150.363102][ T7921] veth1_macvtap: left allmulticast mode [ 150.633797][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 150.691238][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 151.061061][ T7991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.593'. [ 151.130577][ T7991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.593'. [ 151.159132][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'. [ 151.177336][ T7994] raw_sendmsg: syz.3.594 forgot to set AF_INET. Fix it! [ 151.223006][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 151.379875][ T8005] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 152.030784][ T8025] hsr_slave_1 (unregistering): left promiscuous mode [ 152.462610][ T8048] netlink: 'syz.2.606': attribute type 10 has an invalid length. [ 152.509356][ T8048] veth1_vlan: entered allmulticast mode [ 152.579867][ T8048] team0: Device veth1_vlan failed to register rx_handler [ 153.502807][ T8079] bond0: entered promiscuous mode [ 153.509077][ T8079] bond_slave_0: entered promiscuous mode [ 153.535328][ T8079] bond_slave_1: entered promiscuous mode [ 153.551527][ T8079] bond0: entered allmulticast mode [ 153.563826][ T8079] bond_slave_0: entered allmulticast mode [ 153.581658][ T8079] bond_slave_1: entered allmulticast mode [ 153.812809][ T8104] ipvlan0: entered promiscuous mode [ 153.836853][ T8104] ipvlan0: entered allmulticast mode [ 153.862294][ T8104] : entered allmulticast mode [ 154.103188][ T8117] sctp: [Deprecated]: syz.1.622 (pid 8117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.103188][ T8117] Use struct sctp_sack_info instead [ 154.149079][ T8117] sctp: [Deprecated]: syz.1.622 (pid 8117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.149079][ T8117] Use struct sctp_sack_info instead [ 154.303104][ T8120] Cannot find set identified by id 0 to match [ 154.401999][ T8125] __nla_validate_parse: 8 callbacks suppressed [ 154.402017][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'. [ 154.428745][ T8125] netlink: 'syz.1.626': attribute type 7 has an invalid length. [ 154.439927][ T8125] netlink: 'syz.1.626': attribute type 8 has an invalid length. [ 154.449924][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 154.930944][ T8148] bond0: option mode: unable to set because the bond device has slaves [ 154.984527][ T8150] netlink: 252 bytes leftover after parsing attributes in process `syz.1.634'. [ 155.071509][ T30] audit: type=1107 audit(1750739777.982:6): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 155.074012][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 155.349639][ T8161] x_tables: duplicate underflow at hook 4 [ 155.357112][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 155.410713][ T8164] netlink: 71 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.715634][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.641'. [ 155.776315][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 155.787414][ T8177] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 155.797198][ T8177] netlink: 'syz.1.643': attribute type 8 has an invalid length. [ 155.805011][ T8177] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.643'. [ 155.817186][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 155.906695][ T8177] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 155.914418][ T8177] netlink: 'syz.1.643': attribute type 8 has an invalid length. [ 156.053732][ T8188] xt_cgroup: path and classid specified [ 156.061704][ T8190] x_tables: ip_tables: ah match: only valid for protocol 51 [ 156.078308][ T8192] lo speed is unknown, defaulting to 1000 [ 156.140429][ T8192] lo speed is unknown, defaulting to 1000 [ 156.187101][ T8192] lo speed is unknown, defaulting to 1000 [ 157.012074][ T8234] netlink: 'syz.1.659': attribute type 39 has an invalid length. [ 157.168170][ T8192] infiniband syz0: set active [ 157.184493][ T8192] infiniband syz0: added lo [ 157.189801][ T5905] lo speed is unknown, defaulting to 1000 [ 157.215999][ T8242] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 157.238661][ T8192] syz0: rxe_create_cq: returned err = -12 [ 157.248514][ C1] net_ratelimit: 13 callbacks suppressed [ 157.248538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.261041][ T8240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.265284][ T8192] infiniband syz0: Couldn't create ib_mad CQ [ 157.299127][ T8192] infiniband syz0: Couldn't open port 1 [ 157.378172][ T8242] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 157.421564][ T8192] RDS/IB: syz0: added [ 157.448312][ T8192] smc: adding ib device syz0 with port count 1 [ 157.452594][ T8245] syzkaller1: entered promiscuous mode [ 157.476503][ T8192] smc: ib device syz0 port 1 has pnetid [ 157.495200][ T8245] syzkaller1: entered allmulticast mode [ 157.562612][ T8240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.690342][ T5953] lo speed is unknown, defaulting to 1000 [ 157.711149][ T8192] lo speed is unknown, defaulting to 1000 [ 157.809004][ T8240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.878721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.956917][ T8240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.205133][ T8240] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.251879][ T8240] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.324345][ T8240] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.412279][ T8240] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.839196][ T8283] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 158.930879][ T8192] lo speed is unknown, defaulting to 1000 [ 159.091236][ T8293] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 159.664248][ T8192] lo speed is unknown, defaulting to 1000 [ 159.881168][ T8317] __nla_validate_parse: 8 callbacks suppressed [ 159.881190][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.685'. [ 159.915010][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.685'. [ 160.154844][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 160.458560][ T8192] lo speed is unknown, defaulting to 1000 [ 160.669051][ T8333] netlink: 'syz.2.691': attribute type 11 has an invalid length. [ 160.709996][ T8333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'. [ 161.154847][ T5855] Bluetooth: hci0: command tx timeout [ 161.166140][ T8329] lo speed is unknown, defaulting to 1000 [ 161.262481][ T8346] team0 (unregistering): Port device team_slave_0 removed [ 161.281632][ T8346] team0 (unregistering): Port device team_slave_1 removed [ 161.842436][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 161.866978][ T8192] lo speed is unknown, defaulting to 1000 [ 162.232516][ T8373] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 162.243311][ T8373] netlink: 184 bytes leftover after parsing attributes in process `syz.3.701'. [ 162.548891][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'. [ 162.720332][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 162.866416][ T8382] tipc: Enabling of bearer rejected, failed to enable media [ 163.080390][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 164.334328][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'. [ 165.012788][ T8481] __nla_validate_parse: 1 callbacks suppressed [ 165.012809][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.724'. [ 165.119893][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 165.390363][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 165.565025][ T8499] Driver unsupported XDP return value 0 on prog (id 198) dev N/A, expect packet loss! [ 165.790015][ T8508] netlink: 56 bytes leftover after parsing attributes in process `syz.3.735'. [ 165.807358][ T8508] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 166.082429][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.737'. [ 166.232970][ T8521] gtp0: entered promiscuous mode [ 166.280316][ T8521] gtp0: entered allmulticast mode [ 166.313798][ T8525] pimreg: entered allmulticast mode [ 166.371328][ T8531] pimreg: left allmulticast mode [ 166.684259][ T8539] tipc: Enabling of bearer rejected, media not registered [ 167.054857][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 167.115503][ T8558] netlink: 'syz.3.751': attribute type 7 has an invalid length. [ 167.147285][ T8558] netlink: 4372 bytes leftover after parsing attributes in process `syz.3.751'. [ 167.177051][ T8557] tipc: Started in network mode [ 167.186560][ T8557] tipc: Node identity ac14140f, cluster identity 4711 [ 167.210847][ T8557] tipc: New replicast peer: 255.255.255.255 [ 167.229420][ T8557] tipc: Enabled bearer , priority 10 [ 167.250310][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 167.281524][ T8558] tipc: Disabling bearer [ 167.425402][ T8573] xt_l2tp: missing protocol rule (udp|l2tpip) [ 167.531405][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 167.575014][ T8561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.595880][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 167.597765][ T8575] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 167.635044][ T8575] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 167.662239][ T8575] netlink: 'syz.0.759': attribute type 2 has an invalid length. [ 167.709882][ T8576] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 167.749574][ T8576] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 167.774512][ T8576] netlink: 'syz.0.759': attribute type 2 has an invalid length. [ 167.956174][ T8592] netlink: 'syz.0.764': attribute type 24 has an invalid length. [ 168.120506][ T8594] netlink: zone id is out of range [ 168.142318][ T8594] netlink: zone id is out of range [ 168.156730][ T8594] netlink: zone id is out of range [ 168.162153][ T8594] netlink: zone id is out of range [ 168.167959][ T8594] netlink: zone id is out of range [ 168.179131][ T8594] netlink: zone id is out of range [ 168.198917][ T8599] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 168.225081][ T8594] netlink: zone id is out of range [ 168.236387][ T8594] netlink: zone id is out of range [ 168.244750][ T8599] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 168.259222][ T8594] netlink: zone id is out of range [ 168.281809][ T8594] netlink: zone id is out of range [ 168.790514][ T8621] can: request_module (can-proto-5) failed. [ 168.871516][ T8629] lo: entered promiscuous mode [ 168.946815][ T8634] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 169.029036][ T1213] lo speed is unknown, defaulting to 1000 [ 169.037103][ T8633] vlan3: entered allmulticast mode [ 169.042394][ T8633] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 170.793946][ T8704] __nla_validate_parse: 6 callbacks suppressed [ 170.793966][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 171.018723][ T8715] vlan0: entered promiscuous mode [ 171.984448][ T8753] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.815'. [ 172.026492][ T8757] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.815'. [ 172.098618][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 172.159235][ T8765] xt_hashlimit: max too large, truncated to 1048576 [ 172.699207][ T8789] netlink: 9 bytes leftover after parsing attributes in process `syz.4.825'. [ 172.718613][ T8786] batman_adv: batadv0: Interface deactivated: dummy0 [ 172.725735][ T8786] batman_adv: batadv0: Removing interface: dummy0 [ 172.739048][ T8786] bridge_slave_0: left allmulticast mode [ 172.746968][ T8786] bridge_slave_0: left promiscuous mode [ 172.770276][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.794118][ T8788] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 172.806888][ T8786] bridge_slave_1: left allmulticast mode [ 172.821218][ T8786] bridge_slave_1: left promiscuous mode [ 172.830834][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.855440][ T8786] bond0: (slave bond_slave_0): Releasing backup interface [ 172.914079][ T8786] bond0: (slave bond_slave_1): Releasing backup interface [ 172.976284][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.983763][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.031145][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.064464][ T8789] gretap0: entered promiscuous mode [ 173.117510][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 173.124045][ T8788] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 173.180511][ T8788] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.281152][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.297480][ T8790] bond0: (slave wlan1): Releasing backup interface [ 173.306359][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.313992][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.332105][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.338988][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.398790][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.430020][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.458426][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.504907][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.515099][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.552563][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.596744][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.618636][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.660504][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.683825][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.728810][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.751331][ T8831] tipc: Enabling of bearer rejected, failed to enable media [ 173.773201][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.798500][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.837610][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.893635][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.910061][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.921485][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.940283][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.968605][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.991150][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.055053][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.084758][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.091190][ T8815] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.308340][ T8853] netlink: 'syz.1.842': attribute type 9 has an invalid length. [ 174.355306][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 174.409760][ T8856] net_ratelimit: 237 callbacks suppressed [ 174.409781][ T8856] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 174.454472][ T8856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.558049][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 174.597973][ T8861] netlink: 'syz.3.845': attribute type 7 has an invalid length. [ 174.628114][ T8861] netlink: 'syz.3.845': attribute type 8 has an invalid length. [ 174.669138][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 174.785511][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.848'. [ 174.922253][ T8881] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 174.954061][ T8881] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 175.093280][ T8891] set match dimension is over the limit! [ 175.187509][ T8894] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 175.209829][ T8895] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 175.291965][ T8897] xfrm1: entered allmulticast mode [ 175.773378][ T8927] bridge0: entered allmulticast mode [ 175.795646][ T8927] __nla_validate_parse: 1 callbacks suppressed [ 175.795698][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 175.864481][ T8927] bridge_slave_1: left allmulticast mode [ 175.900868][ T8927] bridge_slave_1: left promiscuous mode [ 175.917268][ T8935] netlink: 'syz.4.868': attribute type 11 has an invalid length. [ 175.930895][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.942925][ T8935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.868'. [ 175.961468][ T8927] bridge_slave_0: left allmulticast mode [ 175.981476][ T8927] bridge_slave_0: left promiscuous mode [ 176.004970][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.121968][ T8927] bridge0 (unregistering): left allmulticast mode [ 176.141660][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 176.169673][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 176.179617][ T8951] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 176.195233][ T8944] tipc: Enabled bearer , priority 10 [ 176.470663][ T8955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.530785][ T8966] netlink: 'syz.4.875': attribute type 21 has an invalid length. [ 176.720144][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 176.852690][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 176.874833][ T8977] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 176.888261][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 176.920837][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 176.961784][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 177.251796][ T8996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'. [ 177.611206][ T9015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.695524][ T9015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.226786][ T9041] xt_hashlimit: invalid interval [ 178.434087][ T9053] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 178.813829][ T9065] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 179.110666][ T9077] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 179.128820][ T9077] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 179.144933][ T9077] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 179.214684][ T9077] pim6reg: entered allmulticast mode [ 179.584914][ T9089] netlink: 'syz.2.914': attribute type 11 has an invalid length. [ 179.824687][ T9106] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 180.017937][ T9106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.032144][ T9111] ip6erspan0: entered promiscuous mode [ 180.112072][ T9115] lo speed is unknown, defaulting to 1000 [ 180.831638][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.115581][ T9150] netlink: 'syz.4.932': attribute type 10 has an invalid length. [ 181.229111][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.239024][ T9150] team0: Port device bond0 added [ 183.302908][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 183.583249][ T9182] __nla_validate_parse: 12 callbacks suppressed [ 183.583270][ T9182] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.940'. [ 183.623775][ T9188] netlink: 68 bytes leftover after parsing attributes in process `syz.4.939'. [ 183.656651][ T9188] xt_socket: unknown flags 0x50 [ 183.976284][ T9207] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.997346][ T9208] netlink: 'syz.2.945': attribute type 39 has an invalid length. [ 184.678792][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 184.695164][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 184.746931][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'. [ 185.405991][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 185.665547][ T1213] IPVS: starting estimator thread 0... [ 185.672004][ T9268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'. [ 185.686138][ T9269] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.962'. [ 185.805778][ T9270] IPVS: using max 24 ests per chain, 57600 per kthread [ 185.949852][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.965'. [ 186.235019][ T9297] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 186.243167][ T9297] netlink: 224 bytes leftover after parsing attributes in process `syz.2.972'. [ 186.269627][ T9299] netlink: zone id is out of range [ 186.275135][ T9299] netlink: zone id is out of range [ 186.278630][ T9300] trusted_key: syz.4.973 sent an empty control message without MSG_MORE. [ 186.280263][ T9299] netlink: zone id is out of range [ 186.280290][ T9299] netlink: zone id is out of range [ 186.280298][ T9299] netlink: zone id is out of range [ 186.305069][ T9299] netlink: zone id is out of range [ 186.317725][ T9299] netlink: zone id is out of range [ 186.322941][ T9299] netlink: zone id is out of range [ 186.332830][ T9299] netlink: zone id is out of range [ 186.541145][ T9289] team0 (unregistering): Port device team_slave_0 removed [ 186.559924][ T9289] team0 (unregistering): Port device team_slave_1 removed [ 187.028343][ T9334] netlink: 'syz.3.981': attribute type 5 has an invalid length. [ 187.028678][ T9331] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 187.098286][ T9331] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 188.411710][ T30] audit: type=1800 audit(1750739811.322:7): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.994" name="memory.events" dev="tmpfs" ino=1033 res=0 errno=0 [ 188.756767][ T9426] __nla_validate_parse: 8 callbacks suppressed [ 188.756788][ T9426] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1005'. [ 189.126549][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1012'. [ 189.324727][ T9454] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20001 [ 189.334486][ T9454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1015'. [ 189.406579][ T9454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1015'. [ 189.425403][ T9454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1015'. [ 189.445965][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 189.799093][ T9481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1022'. [ 190.260004][ T9502] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.1031'. [ 190.269710][ T9502] net_ratelimit: 212 callbacks suppressed [ 190.269727][ T9502] netlink: zone id is out of range [ 190.281417][ T9502] netlink: zone id is out of range [ 190.287091][ T9502] netlink: zone id is out of range [ 190.292252][ T9502] netlink: zone id is out of range [ 190.317802][ T9502] netlink: zone id is out of range [ 190.323178][ T9502] netlink: zone id is out of range [ 190.341326][ T9502] netlink: zone id is out of range [ 190.347993][ T9502] netlink: zone id is out of range [ 190.366891][ T9502] netlink: zone id is out of range [ 190.391533][ T9502] netlink: zone id is out of range [ 190.411531][ T9505] tipc: Started in network mode [ 190.439203][ T9505] tipc: Node identity 2ab9f21822cf, cluster identity 4711 [ 190.466726][ T9505] tipc: Enabled bearer , priority 0 [ 190.496122][ T9505] +: renamed from syzkaller0 [ 190.542134][ T9505] tipc: Disabling bearer [ 190.865864][ T9536] bridge0: entered allmulticast mode [ 190.895611][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 190.925619][ T9539] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 190.927993][ T9536] batadv1: left allmulticast mode [ 190.944311][ T9536] batadv1: left promiscuous mode [ 190.966322][ T9536] bridge0: port 3(batadv1) entered disabled state [ 191.110231][ T9536] bridge_slave_1: left allmulticast mode [ 191.124635][ T9536] bridge_slave_1: left promiscuous mode [ 191.130641][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.166533][ T9536] bridge_slave_0: left allmulticast mode [ 191.178999][ T9536] bridge_slave_0: left promiscuous mode [ 191.186661][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.207032][ T9556] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 191.236989][ T9536] bridge0 (unregistering): left allmulticast mode [ 191.318618][ T9539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.336382][ T9546] macvtap1: entered promiscuous mode [ 191.341757][ T9546] macvtap1: entered allmulticast mode [ 191.365304][ T9552] bond3: (slave gretap1): making interface the new active one [ 191.375733][ T9552] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 191.386122][ T9556] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 191.435735][ T9552] syz.2.1040 (9552) used greatest stack depth: 18480 bytes left [ 191.678565][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1051'. [ 191.716153][ T9578] syzkaller1: entered promiscuous mode [ 191.736234][ T9578] syzkaller1: entered allmulticast mode [ 191.875038][ T9583] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 192.525704][ T9616] nbd: must specify a size in bytes for the device [ 192.540422][ T9611] lo speed is unknown, defaulting to 1000 [ 192.915549][ T9628] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 192.961781][ T9630] netlink: 'syz.1.1068': attribute type 2 has an invalid length. [ 193.392534][ T9648] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.422536][ T9648] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.466868][ T9652] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 194.037744][ T9681] __nla_validate_parse: 5 callbacks suppressed [ 194.037764][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 194.361680][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368286][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408168][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 194.745162][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 194.771644][ T9709] x_tables: duplicate underflow at hook 4 [ 194.797455][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 194.855017][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1094'. [ 194.913595][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1094'. [ 194.937946][ T9717] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 194.965788][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'. [ 195.030717][ T9722] netlink: 'syz.4.1097': attribute type 2 has an invalid length. [ 195.094455][ T9722] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1097'. [ 195.145817][ T9727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1098'. [ 195.178795][ T9727] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 195.199295][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 195.460371][ T9750] net_ratelimit: 226 callbacks suppressed [ 195.460392][ T9750] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.507237][ T9748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.686503][ T9757] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 195.798540][ T9760] delete_channel: no stack [ 195.913894][ T9771] netlink: 'syz.4.1112': attribute type 30 has an invalid length. [ 196.841685][ T9809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.883892][ T9809] bridge0: port 1(bond4) entered blocking state [ 196.893332][ T9809] bridge0: port 1(bond4) entered disabled state [ 196.904455][ T9809] bond4: entered allmulticast mode [ 196.928096][ T9809] bond4: entered promiscuous mode [ 196.940913][ T9809] bridge0: port 1(bond4) entered blocking state [ 196.947436][ T9809] bridge0: port 1(bond4) entered forwarding state [ 196.981583][ T1161] bridge0: port 1(bond4) entered disabled state [ 197.361131][ T9846] netlink: 'syz.1.1134': attribute type 49 has an invalid length. [ 198.550732][ T9895] netlink: 'syz.0.1144': attribute type 13 has an invalid length. [ 198.572707][ T9895] netlink: 'syz.0.1144': attribute type 58 has an invalid length. [ 198.743307][ T9898] bond0: left promiscuous mode [ 198.761443][ T9898] bond_slave_0: left promiscuous mode [ 198.791212][ T9898] bond_slave_1: left promiscuous mode [ 198.818813][ T9898] bond0: left allmulticast mode [ 198.823743][ T9898] bond_slave_0: left allmulticast mode [ 198.835227][ T9898] bond_slave_1: left allmulticast mode [ 198.865273][ T9898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.911652][ T9897] lo speed is unknown, defaulting to 1000 [ 198.913107][ T9909] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 198.945934][ T9909] tipc: Resetting bearer [ 198.959458][ T9909] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.989900][ T9909] bond0: (slave team0): Enslaving as an active interface with an up link [ 199.107245][ T9915] __nla_validate_parse: 13 callbacks suppressed [ 199.107263][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 199.159248][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 199.682881][ T9939] syzkaller0: entered promiscuous mode [ 199.699198][ T9939] syzkaller0: entered allmulticast mode [ 199.719543][ T9939] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 200.185161][ T9960] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 200.532379][ T9970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 200.562062][ T9967] syzkaller0: entered promiscuous mode [ 200.568092][ T9967] syzkaller0: entered allmulticast mode [ 200.740507][ T9977] netlink: zone id is out of range [ 200.759891][ T9977] netlink: del zone limit has 4 unknown bytes [ 200.934456][ T9982] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.028647][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1170'. [ 201.094209][ T9984] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 202.526695][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'. [ 202.543601][ T9997] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.989257][T10012] netlink: 'syz.1.1182': attribute type 18 has an invalid length. [ 203.086612][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1184'. [ 203.162991][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 203.205720][T10026] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 203.227856][T10026] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1185'. [ 203.262686][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 203.623472][T10051] veth0: entered promiscuous mode [ 203.670704][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 203.684261][T10051] veth0: left promiscuous mode [ 203.706072][T10055] xt_hashlimit: size too large, truncated to 1048576 [ 203.958127][T10063] Bluetooth: MGMT ver 1.23 [ 204.311474][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 204.523036][T10097] openvswitch: netlink: IPv4 tunnel dst address is zero [ 204.532737][T10092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.845567][T10114] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1216'. [ 205.086513][T10133] netlink: 'syz.1.1221': attribute type 5 has an invalid length. [ 205.251264][T10140] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 205.313432][T10142] sit0: entered promiscuous mode [ 205.323637][T10142] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 205.347742][T10142] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1224'. [ 205.389764][T10148] netlink: 'syz.1.1226': attribute type 6 has an invalid length. [ 205.419575][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 205.547472][T10155] team_slave_1: entered allmulticast mode [ 205.737064][T10166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'. [ 205.773940][T10169] sit0: entered promiscuous mode [ 205.807702][T10169] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 205.821573][T10169] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1233'. [ 205.882098][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 206.247292][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 206.362047][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 206.362833][T10200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 206.757760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.894809][T10215] syz.4.1248 (10215) used greatest stack depth: 17992 bytes left [ 207.475453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.923773][T10276] syzkaller1: entered promiscuous mode [ 207.929419][T10276] syzkaller1: entered allmulticast mode [ 207.944018][T10278] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.999501][T10284] netlink: 'syz.1.1274': attribute type 21 has an invalid length. [ 208.648633][T10317] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 208.722629][T10317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.846730][T10317] bond3: (slave veth3): Enslaving as an active interface with a down link [ 208.941051][T10321] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 209.543090][T10355] lo speed is unknown, defaulting to 1000 [ 209.736065][T10372] __nla_validate_parse: 8 callbacks suppressed [ 209.736084][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 209.774200][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 210.532253][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 210.930433][T10412] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 211.040950][T10414] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 211.062255][ T5953] lo speed is unknown, defaulting to 1000 [ 211.078995][ T5953] syz0: Port: 1 Link DOWN [ 211.106246][ T5952] lo speed is unknown, defaulting to 1000 [ 211.798612][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.806022][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 211.812120][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.926316][T10447] netlink: 'syz.2.1326': attribute type 5 has an invalid length. [ 212.002895][T10447] pimreg: entered allmulticast mode [ 212.065878][T10452] pimreg: left allmulticast mode [ 212.110879][T10457] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1330'. [ 212.192746][T10453] netem: incorrect gi model size [ 212.209003][T10453] netem: change failed [ 212.257964][T10459] tipc: Started in network mode [ 212.319172][T10459] tipc: Node identity ac14140f, cluster identity 4711 [ 212.345210][T10459] tipc: New replicast peer: 255.255.255.255 [ 212.371110][T10459] tipc: Enabled bearer , priority 10 [ 212.488267][T10480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1333'. [ 212.863017][T10494] batman_adv: batadv0: Adding interface: ipvlan2 [ 212.867209][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 212.905099][T10494] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.981416][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.998171][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.011801][T10494] batman_adv: batadv0: Interface activated: ipvlan2 [ 213.026307][T10500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1338'. [ 213.159877][T10509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.361876][T10521] xt_ipcomp: unknown flags B [ 213.375556][T10519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 213.383937][T10520] openvswitch: netlink: Missing key (keys=40, expected=80) [ 213.485590][ T1213] tipc: Node number set to 2886997007 [ 213.821383][T10539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1352'. [ 213.831071][T10539] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1352'. [ 213.840633][T10539] netlink: 'syz.4.1352': attribute type 6 has an invalid length. [ 213.851053][T10539] netlink: 'syz.4.1352': attribute type 5 has an invalid length. [ 213.862593][T10539] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1352'. [ 214.066060][T10552] unknown channel width for channel at 909000KHz? [ 214.093633][T10552] unknown channel width for channel at 909000KHz? [ 214.104325][T10552] unknown channel width for channel at 909000KHz? [ 214.492688][T10572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 214.796099][T10586] __nla_validate_parse: 3 callbacks suppressed [ 214.796118][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 214.829007][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 214.851274][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 214.863333][T10589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.892108][T10589] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 215.112928][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 215.227645][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 215.422978][T10611] openvswitch: netlink: Flow key attribute not present in set flow. [ 215.590344][T10628] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1380'. [ 215.604218][T10628] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1380'. [ 215.878243][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 215.895365][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 216.077665][T10649] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.1388'. [ 216.080082][T10650] x_tables: duplicate underflow at hook 1 [ 217.150541][T10667] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 217.472414][T10630] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 217.486219][T10630] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 217.493369][T10665] veth1_macvtap: left promiscuous mode [ 217.524686][T10665] macsec0: entered promiscuous mode [ 217.530094][T10665] macsec0: entered allmulticast mode [ 217.552792][T10666] veth1_macvtap: entered promiscuous mode [ 217.581378][T10666] veth1_macvtap: entered allmulticast mode [ 217.600482][T10666] macsec0: left promiscuous mode [ 217.628155][T10666] macsec0: left allmulticast mode [ 217.633259][T10666] veth1_macvtap: left allmulticast mode [ 218.134478][T10700] IPv6: Can't replace route, no match found [ 218.717761][T10739] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 218.723510][T10737] x_tables: duplicate underflow at hook 2 [ 218.726797][T10739] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 218.742292][T10739] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 218.783294][T10739] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 218.940486][T10745] gre3: entered promiscuous mode [ 218.956731][T10747] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 218.967882][T10745] gre3: entered allmulticast mode [ 219.106937][T10747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.523292][T10775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.653606][ T5952] IPVS: starting estimator thread 0... [ 219.760775][T10786] IPVS: using max 22 ests per chain, 52800 per kthread [ 219.878338][T10801] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.191019][T10808] xt_policy: neither incoming nor outgoing policy selected [ 220.219689][T10808] __nla_validate_parse: 12 callbacks suppressed [ 220.219708][T10808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1435'. [ 220.598807][T10832] bond0: entered promiscuous mode [ 220.614954][T10826] can: request_module (can-proto-5) failed. [ 220.620928][T10832] bond_slave_0: entered promiscuous mode [ 220.621158][T10832] bond_slave_1: entered promiscuous mode [ 220.648816][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 220.686504][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 220.695954][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 220.723549][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 220.802210][T10845] netlink: 'syz.4.1444': attribute type 39 has an invalid length. [ 220.871651][T10846] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20000 [ 220.974447][T10851] lo speed is unknown, defaulting to 1000 [ 221.497222][T10871] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1453'. [ 221.822268][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 221.852429][T10887] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 222.268002][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1461'. [ 222.391432][T10898] tipc: Enabled bearer , priority 0 [ 222.536216][T10898] syzkaller0: entered promiscuous mode [ 222.541752][T10898] syzkaller0: entered allmulticast mode [ 222.578026][T10898] tipc: Resetting bearer [ 222.611511][T10906] IPVS: length: 26 != 24 [ 222.634102][T10897] tipc: Resetting bearer [ 224.442058][T10897] tipc: Disabling bearer [ 224.681439][T10940] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 225.043346][T10952] bridge_slave_0: left allmulticast mode [ 225.053635][T10952] bridge_slave_0: left promiscuous mode [ 225.060932][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.073681][T10952] bridge_slave_1: left allmulticast mode [ 225.094199][T10952] bridge_slave_1: left promiscuous mode [ 225.094442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.100200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.134399][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 225.150805][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.210764][T10952] bond0: (slave bond_slave_0): Releasing backup interface [ 225.242777][T10952] bond0: (slave bond_slave_1): Releasing backup interface [ 225.282883][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.290777][T10952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.300374][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.310066][T10952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.324321][T10952] bond3: (slave veth5): Releasing active interface [ 225.334493][T10952] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 225.341756][T10952] batman_adv: batadv0: Removing interface: ipvlan2 [ 225.369198][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 225.392976][T10971] netlink: 'syz.0.1478': attribute type 2 has an invalid length. [ 225.559217][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1483'. [ 225.639333][T10983] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1484'. [ 225.772307][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 226.158491][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1492'. [ 226.329396][T10975] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.444284][T11019] GUP no longer grows the stack in syz.1.1495 (11019): 200000003000-200000005000 (200000001000) [ 226.481575][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.1.1495 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 226.481606][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.481618][T11019] Call Trace: [ 226.481627][T11019] [ 226.481635][T11019] dump_stack_lvl+0x189/0x250 [ 226.481677][T11019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.481709][T11019] ? __pfx__printk+0x10/0x10 [ 226.481727][T11019] ? find_vma+0xe7/0x160 [ 226.481763][T11019] __get_user_pages+0x2a60/0x30b0 [ 226.481835][T11019] ? __pfx___get_user_pages+0x10/0x10 [ 226.481863][T11019] ? __gup_longterm_locked+0xbf7/0x15b0 [ 226.481900][T11019] ? down_read_killable+0x1d1/0x350 [ 226.481921][T11019] ? try_get_folio+0x633/0x660 [ 226.481944][T11019] __gup_longterm_locked+0xd66/0x15b0 [ 226.481979][T11019] ? try_grab_folio_fast+0x1be/0x4f0 [ 226.482011][T11019] ? gup_fast_fallback+0x1afc/0x2260 [ 226.482044][T11019] gup_fast_fallback+0x1cd4/0x2260 [ 226.482117][T11019] ? __pfx_gup_fast_fallback+0x10/0x10 [ 226.482156][T11019] ? __pfx_get_page_from_freelist+0x10/0x10 [ 226.482181][T11019] ? is_valid_gup_args+0x11f/0x200 [ 226.482213][T11019] ? get_user_pages_fast+0x4d/0xb0 [ 226.482245][T11019] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 226.482269][T11019] ? vfs_writev+0x31a/0x960 [ 226.482295][T11019] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.482327][T11019] iov_iter_get_pages2+0x5e/0xa0 [ 226.482352][T11019] sk_msg_zerocopy_from_iter+0x1f6/0x830 [ 226.482396][T11019] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 226.482460][T11019] tls_sw_sendmsg+0x989/0x23d0 [ 226.482535][T11019] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 226.482574][T11019] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.482595][T11019] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 226.482622][T11019] ? sock_rps_record_flow+0x19/0x410 [ 226.482644][T11019] ? inet_getname+0x527/0x530 [ 226.482667][T11019] ? inet6_sendmsg+0x101/0x120 [ 226.482691][T11019] __sock_sendmsg+0xe5/0x270 [ 226.482726][T11019] sock_write_iter+0x258/0x330 [ 226.482752][T11019] ? futex_unqueue+0x211/0x240 [ 226.482776][T11019] ? __pfx_sock_write_iter+0x10/0x10 [ 226.482816][T11019] ? __pfx___futex_wait+0x10/0x10 [ 226.482840][T11019] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.482868][T11019] ? __pfx_aa_file_perm+0x10/0x10 [ 226.482911][T11019] do_iter_readv_writev+0x56e/0x7f0 [ 226.482936][T11019] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 226.482962][T11019] ? bpf_lsm_file_permission+0x9/0x20 [ 226.482988][T11019] ? security_file_permission+0x75/0x290 [ 226.483012][T11019] ? rw_verify_area+0x258/0x650 [ 226.483047][T11019] vfs_writev+0x31a/0x960 [ 226.483076][T11019] ? __lock_acquire+0xab9/0xd20 [ 226.483104][T11019] ? __pfx_vfs_writev+0x10/0x10 [ 226.483143][T11019] ? __fget_files+0x2a/0x420 [ 226.483169][T11019] ? __fget_files+0x3a0/0x420 [ 226.483188][T11019] ? __fget_files+0x2a/0x420 [ 226.483218][T11019] do_writev+0x14d/0x2d0 [ 226.483245][T11019] ? __pfx_do_writev+0x10/0x10 [ 226.483264][T11019] ? rcu_is_watching+0x15/0xb0 [ 226.483300][T11019] ? do_syscall_64+0xbe/0x3b0 [ 226.483323][T11019] do_syscall_64+0xfa/0x3b0 [ 226.483343][T11019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.483361][T11019] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.483380][T11019] ? clear_bhb_loop+0x60/0xb0 [ 226.483405][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.483423][T11019] RIP: 0033:0x7f6b4b38e929 [ 226.483442][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.483458][T11019] RSP: 002b:00007f6b4c260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 226.483480][T11019] RAX: ffffffffffffffda RBX: 00007f6b4b5b5fa0 RCX: 00007f6b4b38e929 [ 226.483493][T11019] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 226.483505][T11019] RBP: 00007f6b4b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 226.483517][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.483528][T11019] R13: 0000000000000000 R14: 00007f6b4b5b5fa0 R15: 00007ffe2fd8a108 [ 226.483561][T11019] [ 226.913081][T11023] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 226.929570][T11023] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1497'. [ 226.929657][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 226.960743][T11023] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1497'. [ 227.257169][T11041] bridge0: port 1(batadv1) entered blocking state [ 227.263903][T11041] bridge0: port 1(batadv1) entered disabled state [ 227.270870][T11041] batadv1: entered allmulticast mode [ 227.278285][T11041] batadv1: entered promiscuous mode [ 227.755183][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 227.764990][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 227.907620][T11077] netlink: 'syz.0.1510': attribute type 2 has an invalid length. [ 228.146394][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 228.210443][T11090] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 228.221315][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 228.582649][T11107] lo speed is unknown, defaulting to 1000 [ 228.860840][T11126] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 229.085355][T11125] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 229.118267][T11125] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 229.628767][T11157] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 229.847032][T11157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.018947][T11164] bond5: (slave veth7): Enslaving as an active interface with a down link [ 230.201965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.343367][T11191] netlink: 'syz.1.1540': attribute type 21 has an invalid length. [ 230.498233][T11196] __nla_validate_parse: 5 callbacks suppressed [ 230.498259][T11196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1542'. [ 230.499076][T11198] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 230.681976][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 231.561162][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 231.583382][T11237] netlink: zone id is out of range [ 231.724259][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 232.000781][T11248] x_tables: unsorted underflow at hook 4 [ 232.448385][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 232.664208][T11270] sit0: left promiscuous mode [ 232.791239][T11270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.878598][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 233.010680][T11288] netlink: zone id is out of range [ 233.037837][T11288] netlink: zone id is out of range [ 233.043053][T11288] netlink: zone id is out of range [ 233.174907][T11298] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 233.372366][T11298] bond6: entered promiscuous mode [ 233.434589][T11298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.629623][T11316] pimreg: entered allmulticast mode [ 233.952927][T11330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.277671][T11341] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1583'. [ 234.825459][T11356] openvswitch: netlink: Message has 8 unknown bytes. [ 235.493739][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 235.574036][T11383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.831517][T11399] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1596'. [ 236.031582][T11412] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1602'. [ 236.042853][T11410] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 236.046611][T11412] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1602'. [ 236.069770][T11412] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1602'. [ 236.085075][T11411] bond0: Device is already in use. [ 236.323174][T11422] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 236.497319][T11434] syz_tun: entered allmulticast mode [ 236.566792][T11433] syz_tun: left allmulticast mode [ 236.870643][T11451] netlink: 'syz.3.1617': attribute type 39 has an invalid length. [ 236.963536][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 236.982020][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 236.992240][T11454] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 237.010350][T11454] nbd: error processing sock list [ 237.220286][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 237.229580][T11464] netlink: 'syz.1.1621': attribute type 7 has an invalid length. [ 237.257091][T11464] netlink: 'syz.1.1621': attribute type 8 has an invalid length. [ 237.300961][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 237.361903][T11464] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 237.392802][T11473] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 237.405179][T11473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1623'. [ 237.459424][T11473] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 237.632464][T11484] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 237.659811][T11484] team0: Device hsr_slave_0 failed to register rx_handler [ 237.682128][T11486] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 237.783995][T11493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.793196][T11493] bond5: (slave bond6): making interface the new active one [ 237.802465][T11493] bond5: (slave bond6): Enslaving as an active interface with an up link [ 237.903352][T11486] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 237.909483][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 237.933028][T11493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.791833][T11605] netlink: 'syz.1.1667': attribute type 11 has an invalid length. [ 239.968652][T11609] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 240.490515][T11633] chnl_net:caif_netlink_parms(): no params data found [ 240.764662][T11648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.083053][T11664] __nla_validate_parse: 10 callbacks suppressed [ 241.083076][T11664] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1686'. [ 241.956336][ T49] [ 241.958738][ T49] ====================================================== [ 241.965792][ T49] WARNING: possible circular locking dependency detected [ 241.972848][ T49] 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 Not tainted [ 241.979984][ T49] ------------------------------------------------------ [ 241.987471][ T49] kworker/u8:3/49 is trying to acquire lock: [ 241.993474][ T49] ffff88807d15cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 242.002751][ T49] [ 242.002751][ T49] but task is already holding lock: [ 242.010150][ T49] ffff888032d00958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 242.020069][ T49] [ 242.020069][ T49] which lock already depends on the new lock. [ 242.020069][ T49] [ 242.030484][ T49] [ 242.030484][ T49] the existing dependency chain (in reverse order) is: [ 242.039502][ T49] [ 242.039502][ T49] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 242.047798][ T49] lock_acquire+0x120/0x360 [ 242.052838][ T49] _raw_spin_lock+0x2e/0x40 [ 242.057880][ T49] sch_direct_xmit+0x153/0x4b0 [ 242.063251][ T49] __dev_queue_xmit+0x17b6/0x3a70 [ 242.068804][ T49] hsr_forward_skb+0x158b/0x2860 [ 242.074290][ T49] hsr_dev_xmit+0x1a5/0x220 [ 242.079347][ T49] dev_hard_start_xmit+0x2d4/0x830 [ 242.085001][ T49] __dev_queue_xmit+0x1adf/0x3a70 [ 242.090556][ T49] ip6_finish_output2+0x11fe/0x16a0 [ 242.096288][ T49] ip6_finish_output+0x234/0x7d0 [ 242.101754][ T49] NF_HOOK+0x9e/0x380 [ 242.106279][ T49] mld_sendpack+0x800/0xd80 [ 242.111306][ T49] mld_ifc_work+0x835/0xde0 [ 242.116333][ T49] process_scheduled_works+0xae1/0x17b0 [ 242.122415][ T49] worker_thread+0x8a0/0xda0 [ 242.127622][ T49] kthread+0x70e/0x8a0 [ 242.132214][ T49] ret_from_fork+0x3f9/0x770 [ 242.137334][ T49] ret_from_fork_asm+0x1a/0x30 [ 242.142625][ T49] [ 242.142625][ T49] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 242.150368][ T49] validate_chain+0xb9b/0x2140 [ 242.155672][ T49] __lock_acquire+0xab9/0xd20 [ 242.160883][ T49] lock_acquire+0x120/0x360 [ 242.165914][ T49] _raw_spin_lock_bh+0x36/0x50 [ 242.171211][ T49] hsr_dev_xmit+0x19a/0x220 [ 242.176243][ T49] dev_hard_start_xmit+0x2d4/0x830 [ 242.181885][ T49] __dev_queue_xmit+0x1adf/0x3a70 [ 242.187440][ T49] NF_HOOK+0x30d/0x3a0 [ 242.192044][ T49] arp_xmit+0x16c/0x270 [ 242.196736][ T49] arp_solicit+0xc1d/0xe60 [ 242.201682][ T49] __neigh_event_send+0xf6d/0x1560 [ 242.207323][ T49] neigh_resolve_output+0x198/0x750 [ 242.213117][ T49] ip_finish_output2+0xd3d/0x1160 [ 242.218683][ T49] iptunnel_xmit+0x571/0xa00 [ 242.223802][ T49] ip_tunnel_xmit+0x1c3c/0x2380 [ 242.229195][ T49] gre_tap_xmit+0x590/0x7a0 [ 242.234239][ T49] dev_hard_start_xmit+0x2d4/0x830 [ 242.239875][ T49] sch_direct_xmit+0x241/0x4b0 [ 242.245180][ T49] __dev_queue_xmit+0x17b6/0x3a70 [ 242.250752][ T49] alb_send_lp_vid+0x324/0x510 [ 242.256142][ T49] alb_send_learning_packets+0x10d/0x2c0 [ 242.262307][ T49] bond_alb_monitor+0x3e4/0x1800 [ 242.267774][ T49] process_scheduled_works+0xae1/0x17b0 [ 242.273870][ T49] worker_thread+0x8a0/0xda0 [ 242.278989][ T49] kthread+0x70e/0x8a0 [ 242.283585][ T49] ret_from_fork+0x3f9/0x770 [ 242.288788][ T49] ret_from_fork_asm+0x1a/0x30 [ 242.294075][ T49] [ 242.294075][ T49] other info that might help us debug this: [ 242.294075][ T49] [ 242.304416][ T49] Possible unsafe locking scenario: [ 242.304416][ T49] [ 242.311875][ T49] CPU0 CPU1 [ 242.317245][ T49] ---- ---- [ 242.322613][ T49] lock(&qdisc_xmit_lock_key#4); [ 242.327656][ T49] lock(&hsr->seqnr_lock); [ 242.334710][ T49] lock(&qdisc_xmit_lock_key#4); [ 242.342270][ T49] lock(&hsr->seqnr_lock); [ 242.346779][ T49] [ 242.346779][ T49] *** DEADLOCK *** [ 242.346779][ T49] [ 242.354948][ T49] 9 locks held by kworker/u8:3/49: [ 242.360147][ T49] #0: ffff888057896148 ((wq_completion)bond3#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 242.371223][ T49] #1: ffffc90000b97bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 242.384121][ T49] #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 242.393969][ T49] #3: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 242.403907][ T49] #4: ffff888020ef0258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70 [ 242.416541][ T49] #5: ffff888032d00958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 242.426830][ T49] #6: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 242.436598][ T49] #7: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 242.445404][ T49] #8: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 242.455342][ T49] [ 242.455342][ T49] stack backtrace: [ 242.461230][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 242.461248][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.461258][ T49] Workqueue: bond3 bond_alb_monitor [ 242.461276][ T49] Call Trace: [ 242.461283][ T49] [ 242.461290][ T49] dump_stack_lvl+0x189/0x250 [ 242.461313][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.461334][ T49] ? __pfx__printk+0x10/0x10 [ 242.461349][ T49] ? print_lock_name+0xde/0x100 [ 242.461364][ T49] print_circular_bug+0x2ee/0x310 [ 242.461379][ T49] check_noncircular+0x134/0x160 [ 242.461394][ T49] validate_chain+0xb9b/0x2140 [ 242.461408][ T49] ? unwind_next_frame+0xa5/0x2390 [ 242.461436][ T49] ? unwind_next_frame+0xa5/0x2390 [ 242.461458][ T49] ? unwind_next_frame+0xa5/0x2390 [ 242.461479][ T49] __lock_acquire+0xab9/0xd20 [ 242.461499][ T49] ? hsr_dev_xmit+0x19a/0x220 [ 242.461515][ T49] lock_acquire+0x120/0x360 [ 242.461533][ T49] ? hsr_dev_xmit+0x19a/0x220 [ 242.461549][ T49] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.461568][ T49] ? hsr_dev_xmit+0x19a/0x220 [ 242.461583][ T49] _raw_spin_lock_bh+0x36/0x50 [ 242.461602][ T49] ? hsr_dev_xmit+0x19a/0x220 [ 242.461617][ T49] hsr_dev_xmit+0x19a/0x220 [ 242.461634][ T49] dev_hard_start_xmit+0x2d4/0x830 [ 242.461657][ T49] __dev_queue_xmit+0x1adf/0x3a70 [ 242.461677][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.461699][ T49] ? __dev_queue_xmit+0x27e/0x3a70 [ 242.461719][ T49] ? arpt_do_table+0x1dc4/0x1fd0 [ 242.461740][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 242.461762][ T49] ? arpt_do_table+0x238/0x1fd0 [ 242.461780][ T49] ? __pfx_arpt_do_table+0x10/0x10 [ 242.461803][ T49] ? NF_HOOK+0x9e/0x3a0 [ 242.461824][ T49] NF_HOOK+0x30d/0x3a0 [ 242.461844][ T49] ? __pfx_arp_xmit_finish+0x10/0x10 [ 242.461864][ T49] ? NF_HOOK+0x9e/0x3a0 [ 242.461882][ T49] ? __pfx_NF_HOOK+0x10/0x10 [ 242.461903][ T49] ? __pfx_arp_xmit_finish+0x10/0x10 [ 242.461926][ T49] arp_xmit+0x16c/0x270 [ 242.461945][ T49] ? arp_xmit+0x23/0x270 [ 242.461965][ T49] arp_solicit+0xc1d/0xe60 [ 242.461979][ T49] ? arp_solicit+0x11a/0xe60 [ 242.461991][ T49] ? __pfx_arp_solicit+0x10/0x10 [ 242.462006][ T49] ? __neigh_event_send+0xf08/0x1560 [ 242.462020][ T49] ? __pfx_arp_solicit+0x10/0x10 [ 242.462032][ T49] __neigh_event_send+0xf6d/0x1560 [ 242.462048][ T49] neigh_resolve_output+0x198/0x750 [ 242.462063][ T49] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 242.462086][ T49] ip_finish_output2+0xd3d/0x1160 [ 242.462106][ T49] ? ip_skb_dst_mtu+0x147/0xc50 [ 242.462126][ T49] ? ip_finish_output2+0x452/0x1160 [ 242.462147][ T49] ? __pfx_ip_finish_output2+0x10/0x10 [ 242.462167][ T49] ? ip_skb_dst_mtu+0x147/0xc50 [ 242.462185][ T49] ? ip_skb_dst_mtu+0x147/0xc50 [ 242.462204][ T49] ? ip_skb_dst_mtu+0x970/0xc50 [ 242.462223][ T49] ? __ip_finish_output+0x336/0x3f0 [ 242.462243][ T49] iptunnel_xmit+0x571/0xa00 [ 242.462263][ T49] ip_tunnel_xmit+0x1c3c/0x2380 [ 242.462292][ T49] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 242.462311][ T49] ? gre_build_header+0x3fd/0xa40 [ 242.462333][ T49] ? __pfx_gre_build_header+0x10/0x10 [ 242.462354][ T49] gre_tap_xmit+0x590/0x7a0 [ 242.462374][ T49] ? __pfx_gre_tap_xmit+0x10/0x10 [ 242.462391][ T49] ? __lock_acquire+0xab9/0xd20 [ 242.462412][ T49] dev_hard_start_xmit+0x2d4/0x830 [ 242.462441][ T49] sch_direct_xmit+0x241/0x4b0 [ 242.462457][ T49] ? __pfx_sch_direct_xmit+0x10/0x10 [ 242.462473][ T49] __dev_queue_xmit+0x17b6/0x3a70 [ 242.462494][ T49] ? __dev_queue_xmit+0x27e/0x3a70 [ 242.462517][ T49] ? __pfx___dev_queue_xmit+0x10/0x10 [ 242.462536][ T49] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 242.462556][ T49] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 242.462571][ T49] ? __build_skb_around+0x257/0x3e0 [ 242.462591][ T49] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 242.462607][ T49] ? alb_send_lp_vid+0x139/0x510 [ 242.462625][ T49] alb_send_lp_vid+0x324/0x510 [ 242.462645][ T49] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 242.462664][ T49] ? __lock_acquire+0xab9/0xd20 [ 242.462685][ T49] alb_send_learning_packets+0x10d/0x2c0 [ 242.462703][ T49] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 242.462724][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 242.462740][ T49] bond_alb_monitor+0x3e4/0x1800 [ 242.462758][ T49] ? bond_alb_monitor+0xf1/0x1800 [ 242.462774][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 242.462794][ T49] ? __pfx_bond_alb_monitor+0x10/0x10 [ 242.462811][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 242.462829][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 242.462847][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 242.462867][ T49] process_scheduled_works+0xae1/0x17b0 [ 242.462895][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.462920][ T49] worker_thread+0x8a0/0xda0 [ 242.462940][ T49] kthread+0x70e/0x8a0 [ 242.462956][ T49] ? __pfx_worker_thread+0x10/0x10 [ 242.462976][ T49] ? __pfx_kthread+0x10/0x10 [ 242.462991][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 242.463008][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.463026][ T49] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 242.463041][ T49] ret_from_fork+0x3f9/0x770 [ 242.463061][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 242.463081][ T49] ? __switch_to_asm+0x39/0x70 [ 242.463094][ T49] ? __switch_to_asm+0x33/0x70 [ 242.463107][ T49] ? __pfx_kthread+0x10/0x10 [ 242.463121][ T49] ret_from_fork_asm+0x1a/0x30 [ 242.463140][ T49] [ 243.037767][T11658] veth1_vlan: left allmulticast mode [ 243.135696][T11658] ipvlan0: left promiscuous mode [ 243.140694][T11658] ipvlan0: left allmulticast mode [ 243.146505][T11658] : left allmulticast mode [ 243.220952][T11658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.230049][T11658] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.239223][T11658] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.248329][T11658] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.334901][T11658] gtp0: left promiscuous mode [ 243.342971][T11658] gtp0: left allmulticast mode [ 243.348844][T11658] gtp1: left promiscuous mode [ 243.353546][T11658] gtp1: left allmulticast mode [ 243.376287][T11658] vlan3: left allmulticast mode [ 243.381213][T11658] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 243.399236][T11658] macvtap1: left promiscuous mode [ 243.404331][T11658] macvtap1: left allmulticast mode [ 243.452488][T11676] tipc: Enabling of bearer rejected, media not registered [ 244.214361][ T59] bond4: left allmulticast mode [ 244.219987][ T59] bond4: left promiscuous mode [ 244.226199][ T59] bridge0: port 1(bond4) entered disabled state [ 244.306137][ T59] bond3 (unregistering): (slave gretap1): Releasing active interface [ 244.575015][ T59] bond0 (unregistering): Released all slaves [ 244.583826][ T59] bond1 (unregistering): Released all slaves [ 244.592891][ T59] bond2 (unregistering): Released all slaves [ 244.608335][ T59] bond3 (unregistering): Released all slaves [ 244.694291][ T59] bond4 (unregistering): Released all slaves [ 244.703202][ T59] bond5 (unregistering): Released all slaves [ 244.758360][ T59] tipc: Disabling bearer [ 244.763823][ T59] tipc: Disabling bearer [ 244.769305][ T59] tipc: Left network mode [ 244.970077][ T59] hsr_slave_0: left promiscuous mode [ 244.976136][ T59] hsr_slave_1: left promiscuous mode [ 245.752519][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.800132][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.838578][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.900872][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.997199][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.008024][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.058174][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.068842][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.108746][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.120240][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.157912][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.168874][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.256390][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.287708][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.328077][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.387352][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.480406][ T59] batadv1: left allmulticast mode [ 246.486319][ T59] batadv1: left promiscuous mode [ 246.491374][ T59] bridge0: port 1(batadv1) entered disabled state [ 246.659704][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.668692][ T59] bond_slave_0: left promiscuous mode [ 246.675949][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.686160][ T59] bond_slave_1: left promiscuous mode [ 246.692163][ T59] bond0 (unregistering): Released all slaves [ 246.701101][ T59] bond1 (unregistering): Released all slaves [ 246.786194][ T59] bond2 (unregistering): Released all slaves [ 246.795535][ T59] bond3 (unregistering): Released all slaves [ 246.880995][ T59] bond4 (unregistering): Released all slaves [ 246.960943][ T59] bond5 (unregistering): (slave veth7): Releasing active interface [ 246.970216][ T59] bond5 (unregistering): Released all slaves [ 247.052849][ T59] bond6 (unregistering): Released all slaves [ 247.096521][ T59] erspan0 (unregistering): left promiscuous mode [ 247.141920][ T59] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 247.150840][ T59] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 247.478777][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 247.487129][ T59] tipc: Resetting bearer [ 247.493594][ T59] tipc: Resetting bearer [ 247.499040][ T59] bond0 (unregistering): Released all slaves [ 247.508465][ T59] bond1 (unregistering): Released all slaves [ 247.517277][ T59] bond2 (unregistering): Released all slaves [ 247.599968][ T59] bond3 (unregistering): (slave veth3): Releasing active interface [ 247.609346][ T59] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 247.618642][ T59] bond3 (unregistering): Released all slaves [ 247.671467][ T59] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 247.868294][ T59] bond0 (unregistering): Released all slaves [ 247.878256][ T59] bond1 (unregistering): Released all slaves [ 247.887944][ T59] bond2 (unregistering): Released all slaves [ 247.973768][ T59] bond3 (unregistering): Released all slaves [ 247.982690][ T59] bond4 (unregistering): Released all slaves [ 247.994459][ T59] bond5 (unregistering): (slave bond6): Releasing backup interface [ 248.004172][ T59] bond5 (unregistering): Released all slaves [ 248.089083][ T59] bond6 (unregistering): Released all slaves [ 248.212997][ T59] tipc: Disabling bearer [ 248.219202][ T59] tipc: Left network mode [ 248.232305][ T59] tipc: Disabling bearer [ 248.243419][ T59] tipc: Left network mode [ 248.254371][ T59] tipc: Left network mode [ 248.811646][ T59] hsr_slave_0: left promiscuous mode [ 248.817475][ T59] hsr_slave_1: left promiscuous mode [ 248.823179][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.830818][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.838636][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.846467][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.854995][ T59] batadv_slave_1: left promiscuous mode [ 248.863181][ T59] hsr_slave_0: left promiscuous mode [ 248.868969][ T59] hsr_slave_1: left promiscuous mode [ 248.878012][ T59] hsr_slave_0: left promiscuous mode [ 248.888198][ T59] veth1_macvtap: left promiscuous mode [ 248.893705][ T59] veth0_macvtap: left promiscuous mode [ 248.900662][ T59] veth1_macvtap: left promiscuous mode [ 248.906819][ T59] veth0_macvtap: left promiscuous mode [ 248.912436][ T59] veth1_vlan: left promiscuous mode [ 248.918554][ T59] veth1_macvtap: left promiscuous mode [ 248.924035][ T59] veth0_macvtap: left promiscuous mode [ 248.929864][ T59] veth1_vlan: left promiscuous mode [ 249.297812][ T59] team0 (unregistering): Port device vlan0 removed [ 249.769708][ T5898] infiniband syz1: ib_query_port failed (-19) [ 250.265391][ T59] IPVS: stop unused estimator thread 0... [ 250.271785][ T59] IPVS: stop unused estimator thread 0... [ 250.278936][ T59] IPVS: stop unused estimator thread 0...