last executing test programs: 2.576114108s ago: executing program 4 (id=2035): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@getchain={0x4c, 0x66, 0x25, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xa, 0xa}, {0x8, 0xffe0}, {0xfff2, 0x6}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x170, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc0200"], 0x58}, 0x1, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x4000884) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r12 = socket$tipc(0x1e, 0x5, 0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000600)=""/199, 0x12000, 0x1800, 0x6, 0x1}, 0x20) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r12, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r16, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000100037042a00"/20, @ANYRES32=r14, @ANYBLOB="83040500000000006c0012800900010069706970000000005c000280060012004e210000060010000f00000008000100", @ANYRES32=r9, @ANYBLOB="05000a0001000000060010007f000000060011004e200000050004004b000000060011004e20000006000f0002"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004082) 2.333042396s ago: executing program 4 (id=2038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0xe6, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0x3f, &(0x7f0000000780)={0x3, "4cff3f"}, 0x4) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.13303884s ago: executing program 4 (id=2041): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x42000004, 0x0, &(0x7f0000000340)) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt(r0, 0xff, 0x4, &(0x7f0000000080)="048bb95177876fab88712f2e6472caefef23516db593", 0x16) 1.918598735s ago: executing program 3 (id=2046): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, 0x0, &(0x7f0000000180)) 1.773690723s ago: executing program 3 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r4, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) 1.397454809s ago: executing program 3 (id=2050): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$isdn(0x22, 0x3, 0x3) r4 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xc642}, {r0, 0x4}, {0xffffffffffffffff, 0x2004}, {r1, 0x200}, {r2, 0x1010}, {r3, 0x20}, {r4, 0x4644}], 0x7, &(0x7f0000000080)={r5, r6+10000000}, &(0x7f00000000c0)={[0xe]}, 0x8) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x6, 0x1000, 0x4, 0x1, 0x7fffffff, 0x800}, &(0x7f0000000140)={0x6, 0x9, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0xe, 0x8000000000000001}, &(0x7f0000000180)={0xfffffffffffffff3, 0x6, 0xffff, 0x81, 0x8, 0x7fffffff, 0xbb8, 0x4}, &(0x7f0000000200)={r7, r8+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfd10, 0x1d}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8000, '\x00', 0x0, r9, 0x0, 0x3, 0x1}, 0x50) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0xb12, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r12, 0x139, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000000}, 0x20000000) nanosleep(&(0x7f0000000700)={0x77359400}, &(0x7f0000000740)) r13 = socket$isdn(0x22, 0x3, 0x10) recvmmsg(r13, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/214, 0xd6}], 0x1, &(0x7f00000008c0)=""/84, 0x54}, 0x3}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/225, 0xe1}, {&(0x7f0000000ac0)=""/129, 0x81}, {&(0x7f0000000b80)=""/120, 0x78}, {&(0x7f0000000c00)=""/85, 0x55}], 0x4}, 0x2}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d40)=""/80, 0x50}, {&(0x7f0000000dc0)=""/11, 0xb}, {&(0x7f0000000e00)=""/224, 0xe0}, {&(0x7f0000000f00)=""/59, 0x3b}, {&(0x7f0000000f40)=""/156, 0x9c}, {&(0x7f0000001000)=""/173, 0xad}, {&(0x7f00000010c0)=""/42, 0x2a}, {&(0x7f0000001100)=""/208, 0xd0}, {&(0x7f0000001200)=""/102, 0x66}], 0x9, &(0x7f0000001340)=""/4, 0x4}, 0x3}, {{&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/137, 0x89}, {&(0x7f00000024c0)=""/133, 0x85}, {&(0x7f0000002580)=""/242, 0xf2}, {&(0x7f0000002680)=""/38, 0x26}], 0x5, &(0x7f0000002740)=""/156, 0x9c}, 0xff}, {{&(0x7f0000002800)=@ax25={{0x3, @default}, [@netrom, @netrom, @rose, @remote, @netrom, @bcast, @netrom, @bcast]}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002880)}, {&(0x7f00000028c0)=""/222, 0xde}, {&(0x7f00000029c0)=""/30, 0x1e}, {&(0x7f0000002a00)=""/55, 0x37}, {&(0x7f0000002a40)=""/88, 0x58}, {&(0x7f0000002ac0)=""/108, 0x6c}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/241, 0xf1}], 0x8, &(0x7f0000003cc0)=""/146, 0x92}, 0x9}], 0x5, 0x40010042, &(0x7f0000003ec0)) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000003f00)='cdg\x00', 0x4) r15 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mtu(r15, 0x0, 0xa, &(0x7f0000003f40), &(0x7f0000003f80)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x80000001}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x18f6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x8) socket$netlink(0x10, 0x3, 0xa) setsockopt$inet_sctp6_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f00000040c0)={0x8, 0x2, 0x7, 0x2}, 0x8) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000004140), r11) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x2c, r16, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000004240)) ioctl$SIOCX25SFACILITIES(r14, 0x89e3, &(0x7f0000004280)={0x5c, 0x64, 0xb, 0xa, 0xcf}) 1.277465249s ago: executing program 1 (id=2053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x2, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7800, 0x10, 0x7, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x0, 0x400, 0x8, @local, @mcast1, 0x8, 0x7, 0x2, 0x3}}) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}]}}}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) 1.187824175s ago: executing program 1 (id=2055): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x18c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x160, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xeb7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc68}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa23}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd3b}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x388}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa79}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x495}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0x801c581f, 0x30000002000005c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x80000001, 0x4, 0x7, 0x200, 0x1, 0xfffffffb, '\x00', r9, r10, 0x0, 0x0, 0x1, 0xb}, 0x50) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.078417453s ago: executing program 1 (id=2057): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='veth1_macvtap\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000480)=0x101004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x3}, {0x61}, {0x6}]}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f0000000300)="37ff1535b54d5f2d142f2a43f16b4f981b430a39b21275d90cf73eb0f8dfc558ac6b178fe9a07731d78cc7dc48180820da0caffd6bef24f5596507f4703600c754553c768cd5ac7f1fe90fe9d8c8e4dc95f8b56a74baeb3e9c7332ba46ff3302b815f90942f4273dda922f1d518987a779aa182bd746fca962dbbfb0f889bc4e560b6ee642494d23cd55e29a9ded2d03424b13385d58970f2e3753ee32c8cc745ec3d7837d071f5876fd058d58569708e27e864474f427ae971ae0a4b76c007ec81fa70e0d24db54ecef0c2fea1d33ba9bb0"}, 0x20) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000440)) 941.344158ms ago: executing program 0 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703004000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 904.869646ms ago: executing program 2 (id=2059): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18000000}, 0x50) 853.686469ms ago: executing program 4 (id=2060): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601021c00000000000000070000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) ioctl$FITHAW(r0, 0xc0045878) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) 808.125056ms ago: executing program 0 (id=2061): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x6) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x64, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="0800b123e7ef003f", 0x8}], 0x1, &(0x7f0000000000)=ANY=[], 0x40}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffceb, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8c00, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x7}, 0x10) close(r7) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) socket$alg(0x26, 0x5, 0x0) 758.778357ms ago: executing program 2 (id=2062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0xa00, 0x5, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x3, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000000ffd19a010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 669.426306ms ago: executing program 1 (id=2063): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) socket$netlink(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], "fb36eeca6ead50b375a22a58"}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xff01, 0x0) socketpair(0xb, 0x4, 0x1872ef8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x200040c0) 669.280825ms ago: executing program 4 (id=2064): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) 620.372568ms ago: executing program 0 (id=2065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x2, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7800, 0x10, 0x7, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10}}, 0x84}}, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x0, 0x400, 0x8, @local, @mcast1, 0x8, 0x7, 0x2, 0x3}}) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}]}}}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) 504.755704ms ago: executing program 4 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) recvmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, &(0x7f0000000080)}, 0x10000) 497.969092ms ago: executing program 1 (id=2067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x4008000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 495.933821ms ago: executing program 2 (id=2068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000853002007d0000001801000020786c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 437.411464ms ago: executing program 0 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x200448b4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x3) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48805}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r7, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x894}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 357.550152ms ago: executing program 3 (id=2070): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="9baf0e6cf118eba0392ae2eb55", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pread64(r1, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) 292.790808ms ago: executing program 3 (id=2071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703004100000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 286.079811ms ago: executing program 2 (id=2072): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3f000000}, 0x50) 148.542273ms ago: executing program 2 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x200448b4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000a000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 148.033277ms ago: executing program 0 (id=2074): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) 110.7795ms ago: executing program 1 (id=2075): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, 0x0, &(0x7f0000001080)) r2 = socket(0x1e, 0x805, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/24, 0x689b4ae11267272b, 0x1800, 0x4, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$SIOCSIFHWADDR(r9, 0xff05, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r9, 0x2, &(0x7f0000000040)=0x4) 97.050003ms ago: executing program 3 (id=2076): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}}, 0x0) 1.264986ms ago: executing program 2 (id=2077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ca0010000100000000000000000a140000001100010000000000000000000000000a1c462214a207d72ba7fecfcbd83a2ad2dd8a307840d8fb3421682a94a9fb6321d725e72374f1e51a26f93187fbc16b14b0d240b7a3533c099ff0a5a3501fec010000007534fce758364fb08ffcb6daa1f9658966519b5ae5eb9a4f4b7f6741ef9c28dcb967e7360ffc1ea886398800000000"], 0x28}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x40}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r1}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a000000000012bbd7000fedbdf25", @ANYRES32=r4, @ANYBLOB="0000040002010400680034801400350070696d36726567310000000000000000140035006261746164765f736c6176655f30000014003500626f6e645f736c6176655f3100000000140035007465616d5f736c6176655f300000000014003500776c616e3100000000000000000000000800280083f700"], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 0 (id=2078): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000300)) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00v\x00\r\v\x00\x00\x00\b'], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 88.691787][ T5850] cgroup: Unknown subsys name 'net' [ 88.821656][ T5850] cgroup: Unknown subsys name 'cpuset' [ 88.830790][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.591624][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.991143][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.012713][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.021330][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.029228][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.037356][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.045372][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.054475][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.062542][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.068458][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.071762][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.078505][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.092695][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.092772][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.107882][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.108002][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.117414][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.131333][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.138812][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.157420][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.202819][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.211745][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.227937][ T5885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.237636][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.239119][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.259006][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.939725][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 96.069851][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 96.088486][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 96.136048][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 96.209411][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 96.433240][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.441139][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.449583][ T5870] bridge_slave_0: entered allmulticast mode [ 96.457757][ T5870] bridge_slave_0: entered promiscuous mode [ 96.501510][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.508884][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.516200][ T5864] bridge_slave_0: entered allmulticast mode [ 96.523814][ T5864] bridge_slave_0: entered promiscuous mode [ 96.559328][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.567082][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.574822][ T5870] bridge_slave_1: entered allmulticast mode [ 96.583673][ T5870] bridge_slave_1: entered promiscuous mode [ 96.600393][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.609764][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.618809][ T5872] bridge_slave_0: entered allmulticast mode [ 96.627520][ T5872] bridge_slave_0: entered promiscuous mode [ 96.634858][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.642862][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.650276][ T5864] bridge_slave_1: entered allmulticast mode [ 96.658326][ T5864] bridge_slave_1: entered promiscuous mode [ 96.680854][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.688733][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.695908][ T5865] bridge_slave_0: entered allmulticast mode [ 96.703804][ T5865] bridge_slave_0: entered promiscuous mode [ 96.755040][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.762426][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.770603][ T5872] bridge_slave_1: entered allmulticast mode [ 96.778393][ T5872] bridge_slave_1: entered promiscuous mode [ 96.801559][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.809291][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.817744][ T5865] bridge_slave_1: entered allmulticast mode [ 96.825108][ T5865] bridge_slave_1: entered promiscuous mode [ 96.835232][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.849904][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.891861][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.931343][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.938769][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.946162][ T5880] bridge_slave_0: entered allmulticast mode [ 96.955263][ T5880] bridge_slave_0: entered promiscuous mode [ 96.979187][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.033166][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.040791][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.049172][ T5880] bridge_slave_1: entered allmulticast mode [ 97.057211][ T5880] bridge_slave_1: entered promiscuous mode [ 97.067886][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.094331][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.106392][ T5870] team0: Port device team_slave_0 added [ 97.116968][ T5870] team0: Port device team_slave_1 added [ 97.139546][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.165780][ T5864] team0: Port device team_slave_0 added [ 97.175443][ T5864] team0: Port device team_slave_1 added [ 97.184047][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.193010][ T5873] Bluetooth: hci0: command tx timeout [ 97.261277][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.269614][ T5873] Bluetooth: hci1: command tx timeout [ 97.276360][ T5873] Bluetooth: hci3: command tx timeout [ 97.300344][ T5872] team0: Port device team_slave_0 added [ 97.333550][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.340816][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.369577][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.370576][ T10] cfg80211: failed to load regulatory.db [ 97.386038][ T5873] Bluetooth: hci4: command tx timeout [ 97.386048][ T5874] Bluetooth: hci2: command tx timeout [ 97.394005][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.423630][ T5872] team0: Port device team_slave_1 added [ 97.447761][ T5865] team0: Port device team_slave_0 added [ 97.454529][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.461769][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.487883][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.501458][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.508666][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.535572][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.547972][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.555047][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.581877][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.622583][ T5865] team0: Port device team_slave_1 added [ 97.679573][ T5880] team0: Port device team_slave_0 added [ 97.701342][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.709076][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.735277][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.750207][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.757555][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.784074][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.797825][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.804823][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.831282][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.845540][ T5880] team0: Port device team_slave_1 added [ 97.882855][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.890112][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.917235][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.013451][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.021649][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.050423][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.063655][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.071227][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.097619][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.115057][ T5864] hsr_slave_0: entered promiscuous mode [ 98.122276][ T5864] hsr_slave_1: entered promiscuous mode [ 98.179854][ T5870] hsr_slave_0: entered promiscuous mode [ 98.186286][ T5870] hsr_slave_1: entered promiscuous mode [ 98.193346][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 98.199495][ T5870] Cannot create hsr debugfs directory [ 98.249790][ T5865] hsr_slave_0: entered promiscuous mode [ 98.256318][ T5865] hsr_slave_1: entered promiscuous mode [ 98.263619][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 98.269609][ T5865] Cannot create hsr debugfs directory [ 98.290844][ T5872] hsr_slave_0: entered promiscuous mode [ 98.297574][ T5872] hsr_slave_1: entered promiscuous mode [ 98.304487][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 98.310815][ T5872] Cannot create hsr debugfs directory [ 98.470639][ T5880] hsr_slave_0: entered promiscuous mode [ 98.478679][ T5880] hsr_slave_1: entered promiscuous mode [ 98.485090][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 98.491051][ T5880] Cannot create hsr debugfs directory [ 99.015337][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.045422][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.056989][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.069700][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.135160][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.149193][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.161868][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.190444][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.265723][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.277690][ T5873] Bluetooth: hci0: command tx timeout [ 99.297112][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.311654][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.324198][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.349108][ T5874] Bluetooth: hci3: command tx timeout [ 99.354663][ T5873] Bluetooth: hci1: command tx timeout [ 99.427075][ T5873] Bluetooth: hci2: command tx timeout [ 99.433510][ T5874] Bluetooth: hci4: command tx timeout [ 99.451341][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.495875][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.512596][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.525333][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.636293][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.673932][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.683228][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.697826][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.711997][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.779132][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.816694][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.824020][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.851170][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.872736][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.879920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.905631][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.985960][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.015438][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.044198][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.051414][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.075357][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.082773][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.102608][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.125453][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.133376][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.144623][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.152074][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.273421][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.345812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.353441][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.404686][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.411924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.435155][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.570680][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.639431][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.691304][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.741835][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.749415][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.860247][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.868138][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.053364][ T5864] veth0_vlan: entered promiscuous mode [ 101.069802][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.130260][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.141044][ T5864] veth1_vlan: entered promiscuous mode [ 101.173988][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.342414][ T5872] veth0_vlan: entered promiscuous mode [ 101.357331][ T5873] Bluetooth: hci0: command tx timeout [ 101.422232][ T5872] veth1_vlan: entered promiscuous mode [ 101.426914][ T5873] Bluetooth: hci1: command tx timeout [ 101.433626][ T5873] Bluetooth: hci3: command tx timeout [ 101.459997][ T5864] veth0_macvtap: entered promiscuous mode [ 101.508661][ T5874] Bluetooth: hci4: command tx timeout [ 101.514909][ T5873] Bluetooth: hci2: command tx timeout [ 101.569554][ T5880] veth0_vlan: entered promiscuous mode [ 101.583851][ T5864] veth1_macvtap: entered promiscuous mode [ 101.614327][ T5880] veth1_vlan: entered promiscuous mode [ 101.627773][ T5872] veth0_macvtap: entered promiscuous mode [ 101.678555][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.695983][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.706374][ T5872] veth1_macvtap: entered promiscuous mode [ 101.761484][ T5865] veth0_vlan: entered promiscuous mode [ 101.775209][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.805754][ T5865] veth1_vlan: entered promiscuous mode [ 101.820767][ T5880] veth0_macvtap: entered promiscuous mode [ 101.831525][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.841410][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.852901][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.872409][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.882592][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.893322][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.915455][ T5880] veth1_macvtap: entered promiscuous mode [ 101.953180][ T750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.986232][ T750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.999715][ T750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.010016][ T5870] veth0_vlan: entered promiscuous mode [ 102.036427][ T750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.053655][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.112833][ T5865] veth0_macvtap: entered promiscuous mode [ 102.124322][ T5870] veth1_vlan: entered promiscuous mode [ 102.135537][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.165882][ T5865] veth1_macvtap: entered promiscuous mode [ 102.211025][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.245645][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.260503][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.284898][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.293943][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.316423][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.329731][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.357274][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.365962][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.383192][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.400602][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.414308][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.466046][ T5870] veth0_macvtap: entered promiscuous mode [ 102.476561][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.514535][ T5870] veth1_macvtap: entered promiscuous mode [ 102.522676][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.538961][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551453][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.565655][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.592251][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.613319][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.691563][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.783998][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.841328][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.864616][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.892748][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.903809][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.951881][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.953751][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.972722][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.999439][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.095689][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.118925][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.164793][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.197677][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.331058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.351173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.433621][ T5873] Bluetooth: hci0: command tx timeout [ 103.493266][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.506958][ T5873] Bluetooth: hci3: command tx timeout [ 103.513053][ T5874] Bluetooth: hci1: command tx timeout [ 103.520031][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.580474][ T5995] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 103.587803][ T5874] Bluetooth: hci2: command tx timeout [ 103.593570][ T5874] Bluetooth: hci4: command tx timeout [ 103.701297][ T6000] Zero length message leads to an empty skb [ 103.911459][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 104.019813][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.053468][ T6017] tipc: Enabling of bearer rejected, failed to enable media [ 104.084259][ T6019] netlink: 185380 bytes leftover after parsing attributes in process `syz.1.12'. [ 104.174756][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.217210][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 104.226114][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 104.393731][ T6028] wg2: entered promiscuous mode [ 104.417095][ T6028] wg2: entered allmulticast mode [ 104.993698][ T6050] dvmrp0: entered allmulticast mode [ 105.003163][ T6054] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.085868][ T6056] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 105.244442][ T6066] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 105.282618][ T6068] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 105.474988][ T6075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.501676][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.532133][ T6079] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 105.532628][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 105.640221][ T6082] team0: Device ipvlan2 failed to register rx_handler [ 106.403217][ T6098] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 106.423018][ T6098] netlink: 'syz.2.39': attribute type 11 has an invalid length. [ 106.461603][ T6098] netlink: 220 bytes leftover after parsing attributes in process `syz.2.39'. [ 106.481385][ T6101] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 107.006007][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 107.067893][ T6122] vxcan1: tx address claim with dlc 0 [ 107.225628][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.47'. [ 107.276882][ T6131] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 107.605789][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.53'. [ 107.636063][ T6141] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 107.884024][ T6152] netlink: 'syz.2.57': attribute type 8 has an invalid length. [ 108.530425][ T6133] infiniband syz2: set active [ 108.558456][ T6133] infiniband syz2: added bond0 [ 108.565825][ T6133] syz2: rxe_create_cq: returned err = -12 [ 108.596979][ T6133] infiniband syz2: Couldn't create ib_mad CQ [ 108.604848][ T6133] infiniband syz2: Couldn't open port 1 [ 108.684569][ T6133] RDS/IB: syz2: added [ 108.705015][ T6133] smc: adding ib device syz2 with port count 1 [ 108.724038][ T6133] smc: ib device syz2 port 1 has pnetid [ 109.367254][ T6203] __nla_validate_parse: 7 callbacks suppressed [ 109.367274][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.73'. [ 109.513179][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 109.617073][ T6209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.762756][ T6216] netlink: 248 bytes leftover after parsing attributes in process `syz.1.77'. [ 109.911596][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.941489][ T6222] netlink: 'syz.1.80': attribute type 12 has an invalid length. [ 109.964073][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 110.028835][ T750] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.044563][ T6222] netlink: 'syz.1.80': attribute type 12 has an invalid length. [ 110.065425][ T750] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.084787][ T750] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.112263][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 110.122292][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.174557][ T6227] Bluetooth: MGMT ver 1.23 [ 110.736512][ T6241] syzkaller0: entered promiscuous mode [ 110.757005][ T6241] syzkaller0: entered allmulticast mode [ 110.768911][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.85'. [ 110.782660][ T6244] batadv_slave_1: entered promiscuous mode [ 110.827305][ T6244] tipc: Started in network mode [ 110.836775][ T6244] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 110.850055][ T6244] tipc: Enabled bearer , priority 10 [ 111.256197][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 111.272592][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 111.291883][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 111.968912][ T5932] tipc: Node number set to 10463914 [ 112.145336][ T6243] batadv_slave_1: left promiscuous mode [ 112.153263][ T6250] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 112.206800][ T6250] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 112.215381][ T6250] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 112.460647][ T6263] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 112.560694][ T6268] netlink: 252 bytes leftover after parsing attributes in process `syz.3.94'. [ 112.654698][ T6271] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 112.663146][ T6271] nbd: illegal input index 1048576 [ 113.385515][ T6294] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 113.422573][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.509347][ T6299] netlink: 'syz.1.103': attribute type 58 has an invalid length. [ 114.362594][ T6334] netlink: 'syz.1.111': attribute type 12 has an invalid length. [ 114.371156][ T6334] netlink: 'syz.1.111': attribute type 29 has an invalid length. [ 114.398085][ T6334] __nla_validate_parse: 13 callbacks suppressed [ 114.398106][ T6334] netlink: 148 bytes leftover after parsing attributes in process `syz.1.111'. [ 114.418226][ T6334] netlink: 43 bytes leftover after parsing attributes in process `syz.1.111'. [ 114.738128][ T6354] af_packet: tpacket_rcv: packet too big, clamped from 127 to 4294967272. macoff=96 [ 114.804855][ T6359] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 114.923227][ T6361] syz_tun: entered allmulticast mode [ 115.078499][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 115.406259][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 115.618968][ T6382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.123'. [ 115.666178][ T6389] netlink: 'syz.3.125': attribute type 3 has an invalid length. [ 115.831104][ T6391] vlan2: entered promiscuous mode [ 115.836244][ T6391] bridge0: entered promiscuous mode [ 115.868964][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 115.950105][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 116.077104][ T6401] netlink: 56 bytes leftover after parsing attributes in process `syz.3.128'. [ 116.104268][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 116.197841][ T6401] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 116.251345][ T6401] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 116.502318][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 116.564302][ T6423] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 116.590158][ T6423] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 116.901362][ T6437] bridge_slave_0: left allmulticast mode [ 116.947886][ T6437] bridge_slave_0: left promiscuous mode [ 116.967851][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.065460][ T6437] bridge_slave_1: left allmulticast mode [ 117.084495][ T6437] bridge_slave_1: left promiscuous mode [ 117.115928][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.232475][ T6437] bond0: (slave bond_slave_0): Releasing backup interface [ 117.322589][ T6437] bond0: (slave bond_slave_1): Releasing backup interface [ 117.383417][ T6437] team0: Port device team_slave_0 removed [ 117.394842][ T6437] team0: Port device team_slave_1 removed [ 117.402189][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.411270][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.420783][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.429632][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.864617][ T6475] 8021q: VLANs not supported on wg0 [ 117.876560][ T6448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.916075][ T6448] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 117.964232][ T6485] openvswitch: netlink: Message has 5 unknown bytes. [ 118.100529][ T6448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.131570][ T6448] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 118.203005][ T6448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.271157][ T6448] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 118.312940][ T6448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.332369][ T6448] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.418216][ T6448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.432429][ T6448] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 118.728110][ T6520] Bluetooth: MGMT ver 1.23 [ 118.845884][ T6516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.887713][ T6516] bond0: (slave bond1): Enslaving as an active interface with an up link [ 120.084568][ T6583] __nla_validate_parse: 11 callbacks suppressed [ 120.084591][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 120.427823][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 120.785926][ T6612] netlink: 284 bytes leftover after parsing attributes in process `syz.3.177'. [ 120.838240][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 120.970959][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.990759][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 121.027287][ T6615] bond0: (slave rose0): Enslaving as an active interface with an up link [ 121.440501][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 121.449630][ T6639] netlink: 5 bytes leftover after parsing attributes in process `syz.0.188'. [ 121.474717][ T6648] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 121.516109][ T6648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.799955][ T6664] netlink: 348 bytes leftover after parsing attributes in process `syz.4.193'. [ 122.310539][ T6690] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 122.425668][ T6692] ipvlan0: entered promiscuous mode [ 122.438471][ T6692] ipvlan0: entered allmulticast mode [ 122.446349][ T6692] veth0_vlan: entered allmulticast mode [ 122.457522][ T6694] netlink: 100 bytes leftover after parsing attributes in process `syz.4.201'. [ 123.414773][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 123.467693][ T6739] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 124.196186][ T6777] netlink: 'syz.4.225': attribute type 2 has an invalid length. [ 124.412438][ T6788] tipc: Started in network mode [ 124.447726][ T6788] tipc: Node identity ac1414aa, cluster identity 4711 [ 124.485475][ T6788] tipc: New replicast peer: 10.1.1.0 [ 124.512299][ T6788] tipc: Enabled bearer , priority 10 [ 124.808054][ T6811] erspan0: entered promiscuous mode [ 124.876434][ T6815] netlink: 'syz.0.234': attribute type 25 has an invalid length. [ 124.981630][ T6821] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 124.989471][ T6821] netlink: 'syz.3.236': attribute type 3 has an invalid length. [ 125.232217][ T6828] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 125.311703][ T6832] pimreg: entered allmulticast mode [ 125.337276][ T6833] pimreg: left allmulticast mode [ 125.347426][ T6828] __nla_validate_parse: 4 callbacks suppressed [ 125.347446][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 125.372250][ T6833] syz_tun: left allmulticast mode [ 125.451982][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 125.530570][ T6848] trusted_key: syz.1.245 sent an empty control message without MSG_MORE. [ 125.650069][ T5956] tipc: Node number set to 2886997162 [ 125.952737][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'. [ 126.256282][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 126.276545][ T6879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.252'. [ 126.489972][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.254'. [ 126.923518][ T6901] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.956066][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 126.997257][ T6901] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 127.090016][ T6922] netlink: 'syz.2.262': attribute type 23 has an invalid length. [ 127.122819][ T6906] gretap1: entered promiscuous mode [ 127.140742][ T6906] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.295643][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 128.483439][ T7002] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 128.537798][ T7006] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 129.232293][ T7040] bond0: (slave bond_slave_1): Releasing backup interface [ 129.775072][ T7060] netlink: 'syz.1.296': attribute type 14 has an invalid length. [ 130.388985][ T7086] netlink: 192 bytes leftover after parsing attributes in process `syz.4.304'. [ 130.748251][ T7107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.310'. [ 130.920737][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 130.966873][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 131.142972][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 131.773716][ T7149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.851986][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 131.939690][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'. [ 132.006261][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'. [ 132.111914][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 132.555106][ T7172] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 132.579516][ T7172] netlink: 15 bytes leftover after parsing attributes in process `syz.4.328'. [ 132.834268][ T7201] team0: Device ip6gre1 is of different type [ 132.981905][ T7207] openvswitch: netlink: IP tunnel TTL not specified. [ 133.058836][ T7215] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 135.455603][ T7318] __nla_validate_parse: 4 callbacks suppressed [ 135.455624][ T7318] netlink: 240 bytes leftover after parsing attributes in process `syz.1.364'. [ 135.569996][ T7325] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.577470][ T7325] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.664199][ T7318] vlan2: entered allmulticast mode [ 135.686410][ T7318] bond0: entered allmulticast mode [ 135.737227][ T7321] dvmrp0: left allmulticast mode [ 136.342209][ T7360] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 136.378636][ T7360] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 136.804326][ T7370] syzkaller0: entered promiscuous mode [ 136.823474][ T7370] syzkaller0: entered allmulticast mode [ 136.884070][ T7378] tipc: Enabled bearer , priority 0 [ 137.019892][ T7367] tipc: Resetting bearer [ 137.353718][ T7413] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 138.320864][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.327913][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.777410][ T7367] tipc: Disabling bearer [ 139.320005][ T7458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 140.124150][ T7486] netlink: 'syz.0.410': attribute type 7 has an invalid length. [ 140.156281][ T7486] netlink: 140 bytes leftover after parsing attributes in process `syz.0.410'. [ 140.232198][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 140.401509][ T7494] IPv6: addrconf: prefix option has invalid lifetime [ 140.536282][ T7504] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.416'. [ 141.118100][ T7509] tipc: Resetting bearer [ 141.222352][ T7509] vlan2: left allmulticast mode [ 141.227889][ T7509] bond0: left allmulticast mode [ 141.240462][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.261362][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.309618][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.343080][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.397455][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.406416][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.472052][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.501660][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.550381][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 141.734404][ T7537] pim6reg: entered allmulticast mode [ 141.962305][ T7544] bond2: entered promiscuous mode [ 141.974128][ T7544] bond2: entered allmulticast mode [ 141.983146][ T7544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.118528][ T5932] IPVS: starting estimator thread 0... [ 142.188119][ T7544] bond2 (unregistering): Released all slaves [ 142.227075][ T7563] IPVS: using max 24 ests per chain, 57600 per kthread [ 142.416369][ T7574] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 142.438225][ T7574] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 142.472128][ T7574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.435'. [ 142.493138][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 142.625258][ T7585] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.439'. [ 143.297527][ T7611] netlink: 76 bytes leftover after parsing attributes in process `syz.2.446'. [ 143.310442][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 143.977386][ T7639] netlink: 830 bytes leftover after parsing attributes in process `syz.3.457'. [ 144.021413][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 144.111940][ T7641] netlink: 76 bytes leftover after parsing attributes in process `syz.2.458'. [ 144.480336][ T7657] netlink: 'syz.1.464': attribute type 8 has an invalid length. [ 144.550688][ T7656] 8021q: VLANs not supported on ip6tnl0 [ 144.605561][ T7660] xfrm1: entered promiscuous mode [ 144.615422][ T7660] xfrm1: entered allmulticast mode [ 144.959152][ T7679] netlink: 'syz.1.474': attribute type 3 has an invalid length. [ 145.702459][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.713373][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.721419][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.827375][ T7722] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 145.836050][ T7722] bond0: (slave wlan1): Opening slave failed [ 146.126782][ T7731] __nla_validate_parse: 14 callbacks suppressed [ 146.126803][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.215672][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.305952][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.684790][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.736547][ T7754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.494'. [ 146.766144][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.830458][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.863638][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.913614][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.949832][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 147.245542][ T7776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.764048][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.783977][ T1164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.821101][ T1164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.843647][ T1164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.418996][ T7890] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 150.943682][ T7904] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 150.969542][ T7902] netlink: 'syz.2.534': attribute type 21 has an invalid length. [ 151.271388][ T7920] __nla_validate_parse: 22 callbacks suppressed [ 151.271412][ T7920] netlink: 108 bytes leftover after parsing attributes in process `syz.4.539'. [ 151.656254][ T7935] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 151.761302][ T7944] netlink: 76 bytes leftover after parsing attributes in process `syz.0.548'. [ 152.167148][ T7965] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 152.203043][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 152.363286][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 152.662758][ T7977] netlink: 'syz.1.559': attribute type 6 has an invalid length. [ 152.823143][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 152.885378][ T7991] netlink: 332 bytes leftover after parsing attributes in process `syz.0.565'. [ 152.906572][ T7986] openvswitch: netlink: Tunnel attr 16352 out of range max 16 [ 153.117197][ T8004] netlink: 2 bytes leftover after parsing attributes in process `syz.2.568'. [ 153.161337][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 153.361761][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.369782][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.575193][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.595853][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.944270][ T1153] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.989960][ T1153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.057696][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.108858][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.143983][ T8041] netlink: 244 bytes leftover after parsing attributes in process `syz.3.576'. [ 154.169586][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.209454][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 154.218564][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.244633][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.271990][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.055052][ T8082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.347104][ T8136] __nla_validate_parse: 9 callbacks suppressed [ 156.347126][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 156.566378][ T8146] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 156.624043][ T8146] netlink: 224 bytes leftover after parsing attributes in process `syz.1.606'. [ 156.683963][ T8148] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 156.735907][ T8148] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 156.888038][ T8160] netlink: 108 bytes leftover after parsing attributes in process `syz.1.612'. [ 156.937834][ T8160] netlink: 108 bytes leftover after parsing attributes in process `syz.1.612'. [ 156.976770][ T8160] netlink: 84 bytes leftover after parsing attributes in process `syz.1.612'. [ 156.989659][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 157.084425][ T8164] bond0: entered promiscuous mode [ 157.115817][ T8164] bond_slave_0: entered promiscuous mode [ 157.176888][ T8164] bond0: left promiscuous mode [ 157.184562][ T8164] bond_slave_0: left promiscuous mode [ 157.244979][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 157.305610][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 157.438951][ T8178] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 157.587799][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 157.627807][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.0.621'. [ 157.698788][ T8196] netlink: 'syz.4.623': attribute type 3 has an invalid length. [ 157.725129][ T8196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.093813][ T8246] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 159.104395][ T5972] IPVS: starting estimator thread 0... [ 159.227340][ T8248] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.368409][ T8261] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 159.471881][ T8270] netlink: 'syz.4.647': attribute type 5 has an invalid length. [ 159.529637][ T8270] netlink: 'syz.4.647': attribute type 5 has an invalid length. [ 159.868508][ T8287] tipc: Started in network mode [ 159.874794][ T8287] tipc: Node identity 5e8eff35e9df, cluster identity 4711 [ 159.884069][ T8287] tipc: Enabled bearer , priority 0 [ 159.895369][ T8287] syzkaller0: entered promiscuous mode [ 159.914564][ T8287] syzkaller0: entered allmulticast mode [ 159.945334][ T8287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.013584][ T8289] netlink: 'syz.3.653': attribute type 2 has an invalid length. [ 160.059297][ T8295] tipc: Resetting bearer [ 160.200984][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.209014][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.290050][ T8289] wg2: left promiscuous mode [ 160.380290][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.400725][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.491680][ T8289] ipvlan0: left promiscuous mode [ 160.551533][ T8289] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 160.615204][ T8314] netlink: 'syz.1.658': attribute type 29 has an invalid length. [ 160.628595][ T8285] tipc: Resetting bearer [ 160.650831][ T8285] tipc: Disabling bearer [ 160.670050][ T750] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.682089][ T8314] netlink: 'syz.1.658': attribute type 29 has an invalid length. [ 160.725584][ T750] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.763359][ T750] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.781472][ T750] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.179730][ T8335] dvmrp0: entered allmulticast mode [ 161.488832][ T8354] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.585746][ T8358] __nla_validate_parse: 7 callbacks suppressed [ 161.585767][ T8358] netlink: 100 bytes leftover after parsing attributes in process `syz.4.672'. [ 161.659256][ T8358] netlink: 596 bytes leftover after parsing attributes in process `syz.4.672'. [ 161.927646][ T8372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.677'. [ 162.082517][ T8378] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 162.126690][ T8378] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 162.217106][ T8380] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 162.257066][ T8380] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 162.288109][ T8390] netlink: 'syz.2.685': attribute type 4 has an invalid length. [ 162.910954][ T8416] netlink: 'syz.2.692': attribute type 83 has an invalid length. [ 162.942566][ T8425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.695'. [ 163.608501][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 163.688920][ T8451] openvswitch: netlink: IPv4 tun info is not correct [ 163.801687][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 164.116100][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 164.165731][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'. [ 164.245808][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 164.258981][ T8474] netlink: 'syz.4.708': attribute type 16 has an invalid length. [ 164.267029][ T8474] netlink: 'syz.4.708': attribute type 17 has an invalid length. [ 164.338442][ T8474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.583372][ T8486] netlink: 108 bytes leftover after parsing attributes in process `syz.1.712'. [ 165.790480][ T8535] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 165.797021][ T8535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.644613][ T8579] __nla_validate_parse: 8 callbacks suppressed [ 166.644638][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 166.839565][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 167.641048][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 167.660278][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 167.687659][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 167.711288][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 167.981218][ T8630] pim6reg: entered allmulticast mode [ 167.997280][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 168.017918][ T8636] pim6reg: left allmulticast mode [ 168.196120][ T8648] 8021q: VLANs not supported on gre0 [ 168.484312][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 168.526833][ T8665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.534456][ T8665] IPv6: NLM_F_CREATE should be set when creating new route [ 168.627575][ T8667] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 168.664721][ T8667] netlink: 224 bytes leftover after parsing attributes in process `syz.3.760'. [ 168.676508][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 168.777835][ T8677] netlink: zone id is out of range [ 168.783080][ T8677] netlink: get zone limit has 8 unknown bytes [ 168.849590][ T8680] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 169.431128][ T8709] FAULT_INJECTION: forcing a failure. [ 169.431128][ T8709] name failslab, interval 1, probability 0, space 0, times 1 [ 169.515021][ T8709] CPU: 1 UID: 0 PID: 8709 Comm: syz.1.772 Not tainted syzkaller #0 PREEMPT(full) [ 169.515053][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.515074][ T8709] Call Trace: [ 169.515083][ T8709] [ 169.515092][ T8709] dump_stack_lvl+0x189/0x250 [ 169.515128][ T8709] ? __pfx____ratelimit+0x10/0x10 [ 169.515159][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.515185][ T8709] ? __pfx__printk+0x10/0x10 [ 169.515222][ T8709] ? __pfx___might_resched+0x10/0x10 [ 169.515243][ T8709] ? fs_reclaim_acquire+0x7d/0x100 [ 169.515279][ T8709] should_fail_ex+0x414/0x560 [ 169.515307][ T8709] should_failslab+0xa8/0x100 [ 169.515335][ T8709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 169.515360][ T8709] ? __alloc_skb+0x112/0x2d0 [ 169.515390][ T8709] __alloc_skb+0x112/0x2d0 [ 169.515420][ T8709] netlink_ack+0x146/0xa50 [ 169.515443][ T8709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.515477][ T8709] netlink_rcv_skb+0x28c/0x470 [ 169.515500][ T8709] ? __lock_acquire+0xab9/0xd20 [ 169.515527][ T8709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.515547][ T8709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.515589][ T8709] ? down_read+0x1ad/0x2e0 [ 169.515619][ T8709] genl_rcv+0x28/0x40 [ 169.515635][ T8709] netlink_unicast+0x82c/0x9e0 [ 169.515666][ T8709] ? __pfx_netlink_unicast+0x10/0x10 [ 169.515690][ T8709] ? netlink_sendmsg+0x642/0xb30 [ 169.515716][ T8709] ? skb_put+0x11b/0x210 [ 169.515750][ T8709] netlink_sendmsg+0x805/0xb30 [ 169.515784][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.515819][ T8709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.515849][ T8709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.515867][ T8709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.515894][ T8709] __sock_sendmsg+0x21c/0x270 [ 169.515919][ T8709] ____sys_sendmsg+0x505/0x830 [ 169.515942][ T8709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.515967][ T8709] ? import_iovec+0x74/0xa0 [ 169.515991][ T8709] ___sys_sendmsg+0x21f/0x2a0 [ 169.516010][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.516067][ T8709] ? __fget_files+0x2a/0x420 [ 169.516093][ T8709] ? __fget_files+0x3a0/0x420 [ 169.516130][ T8709] __x64_sys_sendmsg+0x19b/0x260 [ 169.516150][ T8709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.516176][ T8709] ? __pfx_ksys_write+0x10/0x10 [ 169.516197][ T8709] ? rcu_is_watching+0x15/0xb0 [ 169.516219][ T8709] ? do_syscall_64+0xbe/0x3b0 [ 169.516248][ T8709] do_syscall_64+0xfa/0x3b0 [ 169.516272][ T8709] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.516296][ T8709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.516312][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 169.516334][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.516350][ T8709] RIP: 0033:0x7f4d1958ebe9 [ 169.516370][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.516385][ T8709] RSP: 002b:00007f4d1a46f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.516407][ T8709] RAX: ffffffffffffffda RBX: 00007f4d197b5fa0 RCX: 00007f4d1958ebe9 [ 169.516419][ T8709] RDX: 0000000024000040 RSI: 0000200000000440 RDI: 0000000000000004 [ 169.516430][ T8709] RBP: 00007f4d1a46f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.516440][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.516450][ T8709] R13: 00007f4d197b6038 R14: 00007f4d197b5fa0 R15: 00007ffc7f2eb3f8 [ 169.516477][ T8709] [ 170.886899][ T8757] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 170.911453][ T8757] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 171.073514][ T8767] netlink: 'syz.2.789': attribute type 21 has an invalid length. [ 171.654323][ T8789] __nla_validate_parse: 8 callbacks suppressed [ 171.654346][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 171.664097][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 171.691484][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.797'. [ 171.706808][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 171.764658][ T8791] veth3: entered allmulticast mode [ 171.774031][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 171.828450][ T8795] netlink: 5 bytes leftover after parsing attributes in process `syz.0.795'. [ 171.985301][ T8801] openvswitch: netlink: IPv4 tun info is not correct [ 172.275278][ T8818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.299400][ T8817] netlink: 140 bytes leftover after parsing attributes in process `syz.1.808'. [ 172.946350][ T8842] netlink: 108 bytes leftover after parsing attributes in process `syz.4.818'. [ 173.114551][ T8850] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.821'. [ 173.389510][ T8864] netlink: 'syz.1.823': attribute type 2 has an invalid length. [ 173.493368][ T8868] team_slave_0: entered allmulticast mode [ 174.238391][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 174.429111][ T8897] tipc: Resetting bearer [ 174.726421][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.734465][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.761750][ T8968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.211434][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.339535][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.385571][ T9001] netlink: 'syz.0.865': attribute type 23 has an invalid length. [ 176.718927][ T9016] __nla_validate_parse: 9 callbacks suppressed [ 176.718947][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 176.815181][ T9016] vlan2: entered allmulticast mode [ 176.844751][ T9016] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 176.979104][ T9029] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 177.170450][ T9044] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 177.294839][ T9046] pim6reg: entered allmulticast mode [ 177.324006][ T9046] pim6reg: left allmulticast mode [ 177.474866][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 178.022278][ T9080] netlink: 108 bytes leftover after parsing attributes in process `syz.3.888'. [ 178.038961][ T9081] netlink: 212152 bytes leftover after parsing attributes in process `syz.1.889'. [ 178.039247][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 178.300805][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 178.643894][ T9110] netlink: 'syz.2.897': attribute type 12 has an invalid length. [ 178.662786][ T9110] netlink: 'syz.2.897': attribute type 29 has an invalid length. [ 178.672791][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 178.675695][ T9110] netlink: 148 bytes leftover after parsing attributes in process `syz.2.897'. [ 178.702321][ T9110] netlink: 59 bytes leftover after parsing attributes in process `syz.2.897'. [ 178.943719][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 178.956578][ T9125] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 179.306157][ T9138] syzkaller1: entered promiscuous mode [ 179.329268][ T9138] syzkaller1: entered allmulticast mode [ 179.399194][ T9145] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.439792][ T9147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.081228][ T9171] netlink: 'syz.4.916': attribute type 2 has an invalid length. [ 181.217952][ T9222] gretap0: entered promiscuous mode [ 181.292341][ T9222] 0ªî{X¹¦: renamed from gretap0 [ 181.326361][ T9222] 0ªî{X¹¦: left promiscuous mode [ 181.332534][ T9222] 0ªî{X¹¦: entered allmulticast mode [ 181.362347][ T9222] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.423623][ T9229] netlink: 'syz.0.935': attribute type 11 has an invalid length. [ 181.453836][ T9229] netlink: 'syz.0.935': attribute type 11 has an invalid length. [ 181.663533][ T9234] C: renamed from team_slave_0 (while UP) [ 181.745262][ T9234] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 181.786855][ T9234] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 181.829309][ T9244] netlink: 'syz.0.939': attribute type 2 has an invalid length. [ 182.900405][ T9272] __nla_validate_parse: 10 callbacks suppressed [ 182.900429][ T9272] netlink: 236 bytes leftover after parsing attributes in process `syz.2.945'. [ 183.298553][ T9293] netlink: 'syz.0.948': attribute type 9 has an invalid length. [ 183.306272][ T9293] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.948'. [ 183.774604][ T9307] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 183.776945][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 183.803683][ T9307] netlink: 224 bytes leftover after parsing attributes in process `syz.4.951'. [ 183.829328][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 184.183722][ T9308] bridge_slave_1: left allmulticast mode [ 184.197840][ T9308] bridge_slave_1: left promiscuous mode [ 184.223769][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.273376][ T9308] bridge_slave_0: left allmulticast mode [ 184.289455][ T9308] bridge_slave_0: left promiscuous mode [ 184.310831][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.324665][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 184.416507][ T9318] netlink: 108 bytes leftover after parsing attributes in process `syz.1.955'. [ 184.624274][ T9325] pim6reg1: entered promiscuous mode [ 184.643657][ T9325] pim6reg1: entered allmulticast mode [ 184.747955][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 184.835119][ T9338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.961'. [ 185.470095][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 186.125258][ T9387] netlink: 'syz.2.977': attribute type 8 has an invalid length. [ 187.041042][ T9428] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 187.362545][ T9435] bond1: (slave bridge3): making interface the new active one [ 187.371746][ T9435] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 187.425437][ T9442] netlink: 'syz.2.993': attribute type 12 has an invalid length. [ 187.433549][ T9442] netlink: 'syz.2.993': attribute type 29 has an invalid length. [ 188.031196][ T9468] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 188.048939][ T9459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.049131][ T9468] netlink: 'syz.3.1001': attribute type 3 has an invalid length. [ 188.071402][ T9468] __nla_validate_parse: 13 callbacks suppressed [ 188.071422][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1001'. [ 188.186228][ T9474] netlink: 'syz.1.1004': attribute type 13 has an invalid length. [ 188.254875][ T9478] netlink: 'syz.0.1005': attribute type 4 has an invalid length. [ 188.518772][ T9489] netlink: 'syz.3.1011': attribute type 29 has an invalid length. [ 188.540292][ T9492] netlink: 'syz.3.1011': attribute type 29 has an invalid length. [ 188.773818][ T9500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1015'. [ 188.834318][ T9503] netlink: 'syz.2.1017': attribute type 5 has an invalid length. [ 188.997526][ T9510] nbd0: detected capacity change from 0 to 127 [ 189.012295][ T5874] block nbd0: Receive control failed (result -32) [ 189.024211][ T5876] block nbd0: Send control failed (result -32) [ 189.032411][ T5876] block nbd0: Request send failed, requeueing [ 189.042449][ T94] block nbd0: Dead connection, failed to find a fallback [ 189.049854][ T94] block nbd0: shutting down sockets [ 189.055488][ T94] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.065780][ T94] Buffer I/O error on dev nbd0, logical block 0, async page read [ 189.076803][ T5876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.095585][ T5876] Buffer I/O error on dev nbd0, logical block 1, async page read [ 189.103922][ T5876] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.114861][ T5876] Buffer I/O error on dev nbd0, logical block 2, async page read [ 189.122968][ T5876] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.132505][ T5876] Buffer I/O error on dev nbd0, logical block 3, async page read [ 189.140663][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.150111][ T5876] Buffer I/O error on dev nbd0, logical block 0, async page read [ 189.158124][ T5876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.167689][ T5876] Buffer I/O error on dev nbd0, logical block 1, async page read [ 189.175728][ T5876] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.194860][ T5876] Buffer I/O error on dev nbd0, logical block 2, async page read [ 189.208458][ T5876] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.238965][ T5876] Buffer I/O error on dev nbd0, logical block 3, async page read [ 189.257869][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.276003][ T5876] Buffer I/O error on dev nbd0, logical block 0, async page read [ 189.304946][ T5876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.326395][ T5876] Buffer I/O error on dev nbd0, logical block 1, async page read [ 189.354073][ T5876] ldm_validate_partition_table(): Disk read failed. [ 189.384366][ T5876] Dev nbd0: unable to read RDB block 0 [ 189.400770][ T5876] nbd0: unable to read partition table [ 189.437287][ T5876] ldm_validate_partition_table(): Disk read failed. [ 189.446516][ T5876] Dev nbd0: unable to read RDB block 0 [ 189.456009][ T5876] nbd0: unable to read partition table [ 190.567751][ T9514] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 190.579818][ T9514] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 190.993430][ T9551] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1031'. [ 191.079073][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 191.103576][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1028'. [ 191.121652][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 191.174599][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 191.309233][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'. [ 191.371835][ T9568] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 191.640997][ T9582] tipc: Started in network mode [ 191.645955][ T9582] tipc: Node identity 080211000001, cluster identity 4711 [ 191.674206][ T9567] "syz.4.1035" (9567) uses obsolete ecb(arc4) skcipher [ 191.676984][ T9582] tipc: Enabled bearer , priority 0 [ 191.729264][ T9584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1039'. [ 191.742864][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 191.743605][ T9582] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 191.786766][ T9582] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 191.932001][ T9593] tipc: Started in network mode [ 191.944961][ T9593] tipc: Node identity ac14140f, cluster identity 4711 [ 191.971383][ T9593] tipc: New replicast peer: 255.255.255.255 [ 191.981052][ T9593] tipc: Enabled bearer , priority 10 [ 192.384540][ T9618] validate_nla: 2 callbacks suppressed [ 192.384561][ T9618] netlink: 'syz.3.1048': attribute type 5 has an invalid length. [ 192.817517][ T3097] tipc: Node number set to 134418688 [ 192.977110][ T5956] tipc: Node number set to 2886997007 [ 193.001683][ T9642] Illegal XDP return value 16128 on prog (id 191) dev lo, expect packet loss! [ 193.509622][ T9661] siw: device registration error -23 [ 193.594658][ T9670] __nla_validate_parse: 3 callbacks suppressed [ 193.594677][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 193.924472][ T9685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1069'. [ 193.964455][ T9684] syz.1.1069 uses old SIOCAX25GETINFO [ 194.048637][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1071'. [ 194.320887][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 194.345961][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 194.379935][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 194.402608][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 194.597276][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 195.082215][ T9730] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 195.091966][ T9730] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1087'. [ 195.117612][ T9730] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1087'. [ 195.314676][ T9739] xfrm1: entered promiscuous mode [ 195.333203][ T9739] xfrm1: entered allmulticast mode [ 195.952678][ T9764] syzkaller1: entered promiscuous mode [ 195.958331][ T9764] syzkaller1: entered allmulticast mode [ 196.288304][ T9774] gretap1: entered promiscuous mode [ 197.070432][ T9821] veth5: entered allmulticast mode [ 197.251632][ T9832] openvswitch: netlink: Message has 5 unknown bytes. [ 197.261772][ T9831] netlink: 'syz.0.1122': attribute type 3 has an invalid length. [ 197.276239][ T9831] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 197.286065][ T9832] sctp: [Deprecated]: syz.2.1121 (pid 9832) Use of int in max_burst socket option. [ 197.286065][ T9832] Use struct sctp_assoc_value instead [ 197.631458][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.804518][ T9857] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 199.472663][ T9908] __nla_validate_parse: 19 callbacks suppressed [ 199.472684][ T9908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 199.529883][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 199.715379][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 199.734857][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 199.752778][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.759394][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.027009][ T9921] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1155'. [ 200.160365][ T9922] syz_tun: entered allmulticast mode [ 200.289101][ T9928] netlink: 'syz.3.1157': attribute type 4 has an invalid length. [ 200.318709][ T9928] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1157'. [ 200.354856][ T9928] `: renamed from bond0 [ 200.482657][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 200.763209][ T9942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1160'. [ 200.773147][ T9944] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 200.807472][ T9944] veth1_macvtap: left promiscuous mode [ 201.183576][ T9968] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 201.422306][ T9969] can: request_module (can-proto-0) failed. [ 201.583814][ T9988] 8021q: VLANs not supported on vcan0 [ 201.607325][ T9988] 8021q: VLANs not supported on vcan0 [ 201.624444][ T9988] 8021q: VLANs not supported on vcan0 [ 201.654997][ T9988] 8021q: VLANs not supported on vcan0 [ 201.677099][ T9988] 8021q: VLANs not supported on vcan0 [ 201.682600][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 201.703837][ T9988] 8021q: VLANs not supported on vcan0 [ 201.713296][ T9993] netlink: 'syz.2.1177': attribute type 12 has an invalid length. [ 201.720710][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 201.743360][ T9988] 8021q: VLANs not supported on vcan0 [ 201.860255][ T9988] 8021q: VLANs not supported on vcan0 [ 201.865998][ T9988] 8021q: VLANs not supported on vcan0 [ 201.872350][ T9988] 8021q: VLANs not supported on vcan0 [ 201.878446][ T9988] 8021q: VLANs not supported on vcan0 [ 201.884349][ T9988] 8021q: VLANs not supported on vcan0 [ 201.890173][ T9988] 8021q: VLANs not supported on vcan0 [ 201.895749][ T9988] 8021q: VLANs not supported on vcan0 [ 201.901503][ T9988] 8021q: VLANs not supported on vcan0 [ 201.911640][ T9988] 8021q: VLANs not supported on vcan0 [ 201.921072][ T9988] 8021q: VLANs not supported on vcan0 [ 201.926904][ T9988] 8021q: VLANs not supported on vcan0 [ 201.935159][ T9988] 8021q: VLANs not supported on vcan0 [ 201.945028][ T9988] 8021q: VLANs not supported on vcan0 [ 201.954631][ T9988] 8021q: VLANs not supported on vcan0 [ 201.962815][ T9988] 8021q: VLANs not supported on vcan0 [ 201.971688][ T9988] 8021q: VLANs not supported on vcan0 [ 201.981232][ T9988] 8021q: VLANs not supported on vcan0 [ 201.991971][ T9988] 8021q: VLANs not supported on vcan0 [ 202.001003][ T9988] 8021q: VLANs not supported on vcan0 [ 202.017295][ T9988] 8021q: VLANs not supported on vcan0 [ 202.026178][ T9988] 8021q: VLANs not supported on vcan0 [ 202.038526][ T9988] 8021q: VLANs not supported on vcan0 [ 202.045257][ T9988] 8021q: VLANs not supported on vcan0 [ 202.058322][ T9988] 8021q: VLANs not supported on vcan0 [ 202.064247][ T9988] 8021q: VLANs not supported on vcan0 [ 202.076209][ T9988] 8021q: VLANs not supported on vcan0 [ 202.731204][T10040] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 202.765792][T10040] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 202.777852][T10046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.942579][T10054] openvswitch: netlink: Message has 5 unknown bytes. [ 203.142603][T10064] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 203.572046][T10087] pimreg3: entered allmulticast mode [ 203.896343][T10104] netlink: 'syz.1.1210': attribute type 21 has an invalid length. [ 204.520030][ T1164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.534806][T10128] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 204.560503][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.597431][ T1164] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.632726][T10128] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 204.651805][ T1164] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.746300][T10138] lo: entered promiscuous mode [ 204.807632][T10138] tunl0: entered promiscuous mode [ 204.846198][T10145] __nla_validate_parse: 13 callbacks suppressed [ 204.846241][T10145] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 204.849692][T10148] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 204.871179][T10138] gre0: entered promiscuous mode [ 204.930680][T10138] gretap0: entered promiscuous mode [ 205.014600][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 205.030831][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 205.044450][T10160] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 205.075266][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.092533][T10138] erspan0: entered promiscuous mode [ 205.123979][T10138] ip_vti0: entered promiscuous mode [ 205.152582][T10139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 205.162485][T10141] netem: unknown loss type 0 [ 205.170810][T10141] netem: change failed [ 205.327537][T10148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.373517][T10162] veth3: entered promiscuous mode [ 205.391689][T10162] bond3: (slave veth3): Enslaving as an active interface with a down link [ 205.400894][T10165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.432219][T10166] vlan3: entered allmulticast mode [ 205.438462][T10166] bond3: entered allmulticast mode [ 205.445869][T10166] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 205.449391][T10176] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 205.732618][T10176] bond2: entered promiscuous mode [ 205.754721][T10176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.916038][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 206.038908][T10207] openvswitch: netlink: EtherType 257 is less than min 600 [ 206.327054][T10224] syzkaller1: entered promiscuous mode [ 206.361243][T10224] syzkaller1: entered allmulticast mode [ 206.387564][T10226] netlink: 'syz.1.1242': attribute type 83 has an invalid length. [ 206.403042][T10224] netlink: 'syz.1.1242': attribute type 83 has an invalid length. [ 206.775823][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 207.244813][T10262] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 207.341805][T10267] team0: Device gtp0 is of different type [ 207.474541][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 207.513906][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.784903][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 207.998876][T10290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'. [ 208.024774][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.033348][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.045083][T10289] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 208.128309][T10290] raw_sendmsg: syz.0.1265 forgot to set AF_INET. Fix it! [ 208.141517][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 208.379063][T10300] pim6reg1: entered promiscuous mode [ 208.384453][T10300] pim6reg1: entered allmulticast mode [ 208.468778][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 208.504989][T10298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.862956][T10317] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 209.412471][T10344] netlink: 'syz.0.1281': attribute type 33 has an invalid length. [ 209.860695][T10356] __nla_validate_parse: 2 callbacks suppressed [ 209.860714][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 210.017905][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.173911][T10370] netlink: 212152 bytes leftover after parsing attributes in process `syz.2.1291'. [ 210.192009][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 210.282673][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 210.292005][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1290'. [ 210.353484][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 210.636969][T10396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1294'. [ 210.646101][T10396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1294'. [ 210.684398][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 210.867215][ T5874] Bluetooth: hci4: command tx timeout [ 211.483800][T10439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.795838][T10455] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 212.325711][T10474] netlink: 'syz.3.1318': attribute type 10 has an invalid length. [ 212.480033][T10484] netlink: 'syz.1.1324': attribute type 29 has an invalid length. [ 213.768927][T10532] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 214.054351][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.365125][T10566] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 214.488887][T10569] vlan3: entered allmulticast mode [ 214.520846][T10569] gretap0: entered allmulticast mode [ 214.878117][T10586] __nla_validate_parse: 16 callbacks suppressed [ 214.878138][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 215.432162][T10610] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.448499][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 215.499466][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 215.556659][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 215.636137][T10619] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.700194][T10621] C: renamed from team_slave_0 [ 215.729260][T10621] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 215.751740][T10621] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.807455][T10622] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.843981][T10628] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1369'. [ 215.861512][T10628] netlink: zone id is out of range [ 215.869570][T10628] netlink: get zone limit has 8 unknown bytes [ 216.227775][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 216.566988][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 216.698554][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 216.770554][T10667] netlink: 'syz.1.1381': attribute type 3 has an invalid length. [ 217.093311][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 217.174109][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 217.920006][T10721] netlink: 'syz.3.1397': attribute type 4 has an invalid length. [ 218.048089][T10729] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 218.067191][T10726] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 218.106129][T10725] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 218.178829][T10729] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 218.319137][T10743] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 218.336705][T10743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.359994][T10785] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 220.202519][T10835] __nla_validate_parse: 12 callbacks suppressed [ 220.202540][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 221.028657][T10858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1445'. [ 221.077066][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 221.097710][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 221.689508][T10894] netlink: 'syz.4.1454': attribute type 39 has an invalid length. [ 221.879658][T10896] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 221.899465][T10895] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 221.992602][T10905] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 222.011160][T10905] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1458'. [ 222.033597][T10912] netlink: 'syz.2.1460': attribute type 7 has an invalid length. [ 222.053031][T10913] netlink: 'syz.2.1460': attribute type 7 has an invalid length. [ 222.098169][T10915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1458'. [ 222.304680][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 222.409611][T10927] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 222.418484][T10927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1466'. [ 222.431179][T10922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.443784][T10927] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 222.557773][T10933] netlink: 'syz.0.1468': attribute type 11 has an invalid length. [ 222.578641][T10933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1468'. [ 223.105887][T10951] netlink: 'syz.2.1473': attribute type 11 has an invalid length. [ 223.148849][T10953] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 223.417317][T10961] syzkaller1: entered promiscuous mode [ 223.422895][T10961] syzkaller1: entered allmulticast mode [ 223.896073][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 224.089099][T10991] erspan0: entered allmulticast mode [ 224.618605][T11016] netlink: 'syz.2.1492': attribute type 25 has an invalid length. [ 224.683038][T11019] tipc: Enabled bearer , priority 0 [ 224.710151][T11019] syzkaller0: entered promiscuous mode [ 224.742692][T11019] syzkaller0: entered allmulticast mode [ 224.795045][T11019] tipc: Resetting bearer [ 224.815072][T11018] tipc: Resetting bearer [ 224.889205][T11018] tipc: Disabling bearer [ 224.933146][T11033] netlink: 'syz.0.1499': attribute type 6 has an invalid length. [ 224.938470][T11029] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 224.988021][T11029] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.021814][T11029] gretap2: entered promiscuous mode [ 225.029664][T11029] gretap2: entered allmulticast mode [ 225.360994][T11038] __nla_validate_parse: 2 callbacks suppressed [ 225.361017][T11038] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1502'. [ 225.397383][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 225.492067][T11042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1500'. [ 225.503065][T11046] rdma_op ffff8880559e41f0 conn xmit_rdma 0000000000000000 [ 225.598447][T11045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1500'. [ 226.241019][T11085] IPVS: Unknown mcast interface: vcan0 [ 226.401591][T11089] sock: sock_set_timeout: `syz.0.1521' (pid 11089) tries to set negative timeout [ 226.599343][T11095] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.924957][T11103] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1524'. [ 226.970838][T11103] netem: unknown loss type 0 [ 226.976018][T11103] netem: change failed [ 227.028171][T11103] sch_fq: defrate 0 ignored. [ 227.054416][T11108] validate_nla: 2 callbacks suppressed [ 227.054441][T11108] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 227.106527][T11112] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 227.152917][T11112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1528'. [ 227.193918][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 227.311882][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 227.677708][T11136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1530'. [ 227.725722][T11136] openvswitch: netlink: Flow key attr not present in new flow. [ 227.848832][T11149] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 228.341730][T11168] erspan0: entered allmulticast mode [ 228.542637][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 229.036322][T11212] veth0_vlan: left promiscuous mode [ 229.343641][T11223] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 229.395912][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.909616][T11254] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 229.936351][T11254] netlink: 'syz.0.1570': attribute type 2 has an invalid length. [ 230.177496][T11269] unknown channel width for channel at 909000KHz? [ 230.722455][T11298] macvlan3: entered allmulticast mode [ 230.730949][T11298] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 230.861180][T11307] __nla_validate_parse: 4 callbacks suppressed [ 230.861202][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1584'. [ 230.907416][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 231.048762][T11313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.224659][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 231.257327][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 231.462761][T11326] tipc: Enabled bearer , priority 0 [ 231.505474][T11323] tipc: Enabling of bearer rejected, already enabled [ 231.545411][T11326] syzkaller0: entered promiscuous mode [ 231.561175][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 231.567166][T11326] syzkaller0: entered allmulticast mode [ 231.656896][T11323] tipc: Resetting bearer [ 231.690203][T11322] tipc: Resetting bearer [ 231.753700][T11335] xt_policy: too many policy elements [ 231.797775][T11322] tipc: Disabling bearer [ 231.819007][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 231.908547][T11339] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 231.925809][T11335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.059977][T11347] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 232.210752][T11349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1601'. [ 232.272072][T11349] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1601'. [ 232.306972][T11349] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1601'. [ 232.659746][T11378] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1609'. [ 232.765133][T11378] openvswitch: netlink: Key type 8208 is out of range max 32 [ 233.161924][T11402] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 233.206819][T11402] block nbd1: not configured, cannot reconfigure [ 234.248203][T11470] tipc: Resetting bearer [ 234.626331][T11487] Unsupported ieee802154 address type: 0 [ 234.644238][T11495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.910333][T11499] vlan3: entered promiscuous mode [ 235.937935][T11541] netlink: 'syz.2.1653': attribute type 2 has an invalid length. [ 235.974585][T11544] __nla_validate_parse: 17 callbacks suppressed [ 235.974607][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1655'. [ 235.991591][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 236.050887][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 236.253011][T11544] veth7: entered allmulticast mode [ 236.348560][T11560] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 236.368953][T11560] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 236.641651][T11580] netlink: 'syz.3.1666': attribute type 2 has an invalid length. [ 236.666377][T11580] netlink: 'syz.3.1666': attribute type 8 has an invalid length. [ 236.697142][T11580] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.1666'. [ 237.012589][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 237.079813][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'. [ 237.138373][T11600] tc_dump_action: action bad kind [ 237.224038][T11607] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 237.440998][T11616] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 237.481887][T11617] veth0: entered promiscuous mode [ 237.570246][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 237.591594][T11616] bond2: entered promiscuous mode [ 237.599844][T11616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.607425][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 237.667988][T11625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.675316][T11625] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 237.690215][T11625] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 237.721305][T11625] bond2: (slave wireguard0): making interface the new active one [ 237.737384][T11625] wireguard0: entered promiscuous mode [ 237.757753][T11625] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 237.776963][T11615] veth0: left promiscuous mode [ 237.797473][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 237.811123][T11643] netlink: 'syz.4.1680': attribute type 12 has an invalid length. [ 237.855689][T11642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1681'. [ 238.073326][T11655] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 238.111449][T11658] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 238.163045][T11654] team0: Device gtp0 is of different type [ 238.297189][T11662] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 238.384517][T11671] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 238.452464][T11671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.568271][T11676] bond2: (slave veth5): Enslaving as an active interface with a down link [ 238.604120][T11682] vxcan2: entered allmulticast mode [ 238.639959][T11671] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 238.759499][T11676] bond2: (slave veth7): Enslaving as an active interface with a down link [ 239.252205][T11706] netlink: 'syz.0.1699': attribute type 21 has an invalid length. [ 239.730148][T11730] netlink: 'syz.4.1707': attribute type 9 has an invalid length. [ 239.885884][T11735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.897637][T11735] team0: Port device bond3 added [ 240.292533][T11756] netlink: 'syz.1.1716': attribute type 3 has an invalid length. [ 240.419845][T11760] C: renamed from lo (while UP) [ 240.458112][T11761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 240.727208][T11770] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.977313][T11783] __nla_validate_parse: 14 callbacks suppressed [ 240.977334][T11783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1723'. [ 241.703116][T11816] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 241.717233][T11824] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1736'. [ 242.141332][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.221027][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.290294][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.354515][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.391242][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.407295][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 242.511467][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.527460][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.561154][T11856] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 242.563585][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.591338][T11855] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 242.720773][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 242.742173][T11856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.769456][T11858] bond5: (slave gretap1): making interface the new active one [ 242.779504][T11858] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 242.908580][T11871] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 242.933758][T11859] bond3 (unregistering): Released all slaves [ 243.002873][T11862] IPv6: sit1: Disabled Multicast RS [ 243.034250][T11871] team0: Device dummy0 failed to register rx_handler [ 243.054546][T11878] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 243.415316][T11891] dvmrp8: entered allmulticast mode [ 243.424569][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1758'. [ 243.447849][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 243.475761][T11891] dvmrp8: left allmulticast mode [ 243.804494][T11910] netlink: 65 bytes leftover after parsing attributes in process `syz.2.1763'. [ 243.969183][T11917] tipc: Enabled bearer , priority 0 [ 243.995804][T11917] syzkaller0: entered promiscuous mode [ 244.004314][T11917] syzkaller0: entered allmulticast mode [ 244.023175][T11922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1767'. [ 244.081365][T11917] tipc: Resetting bearer [ 244.090683][T11916] tipc: Resetting bearer [ 244.114140][T11916] tipc: Disabling bearer [ 244.142114][T11926] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 244.259740][T11926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.411840][T11931] bond4: (slave veth5): Enslaving as an active interface with a down link [ 244.541545][T11925] bond4: (slave veth7): Enslaving as an active interface with a down link [ 244.863603][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 244.923129][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 246.734358][T12015] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 246.765877][T12015] syz_tun: entered promiscuous mode [ 246.803299][T12015] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 246.821506][T12015] net_ratelimit: 25 callbacks suppressed [ 246.821527][T12015] openvswitch: netlink: Missing key (keys=40, expected=100) [ 247.009435][T12023] __nla_validate_parse: 1 callbacks suppressed [ 247.009458][T12023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1797'. [ 247.044768][T12023] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.180918][T12029] unsupported nlmsg_type 40 [ 247.262422][T12031] syzkaller1: entered promiscuous mode [ 247.294379][T12031] syzkaller1: entered allmulticast mode [ 247.382339][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 247.569339][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1803'. [ 248.299195][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 248.326749][T12073] openvswitch: netlink: Flow key attr not present in new flow. [ 248.348824][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 248.450525][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 248.456450][T12080] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 248.496236][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 248.688039][T12092] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1817'. [ 248.736027][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 249.445048][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 250.561396][T12184] openvswitch: netlink: Message has 4 unknown bytes. [ 250.581678][T12184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.657879][T12183] block nbd1: server does not support multiple connections per device. [ 250.676506][T12183] block nbd1: shutting down sockets [ 250.857100][T12201] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 250.970362][T12203] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 251.128108][T12203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.632433][T12216] bond7 (unregistering): Released all slaves [ 252.336774][T12265] netlink: 'syz.1.1870': attribute type 83 has an invalid length. [ 252.366451][T12265] __nla_validate_parse: 7 callbacks suppressed [ 252.366472][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 252.440230][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1871'. [ 252.893437][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 253.186295][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 253.768923][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 253.796486][T12345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.485903][T12345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.596261][T12349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1888'. [ 254.965630][T12387] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 255.026903][T12387] netlink: 'syz.3.1896': attribute type 4 has an invalid length. [ 255.037336][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1897'. [ 255.061629][T12387] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1896'. [ 255.089855][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 255.258224][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 255.334860][T12397] veth1_vlan: mtu less than device minimum [ 255.417851][T12406] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 255.709086][T12422] gretap2: entered promiscuous mode [ 255.723068][T12422] gretap2: entered allmulticast mode [ 255.866180][T12433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.042569][T12443] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 256.735630][T12474] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 257.003125][T12484] netlink: 'syz.2.1925': attribute type 6 has an invalid length. [ 257.047840][T12484] netlink: 'syz.2.1925': attribute type 5 has an invalid length. [ 257.308319][ T5876] udevd[5876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 257.356453][T12481] udevd[12481]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 257.592396][T12510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.622860][T12510] bond0: (slave bond6): Enslaving as an active interface with a down link [ 257.734457][T12526] __nla_validate_parse: 13 callbacks suppressed [ 257.734478][T12526] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1933'. [ 257.747905][T12516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1933'. [ 257.870400][T12534] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1937'. [ 257.990033][T12542] tipc: Enabled bearer , priority 0 [ 258.003737][T12542] syzkaller0: entered promiscuous mode [ 258.019394][T12542] syzkaller0: entered allmulticast mode [ 258.058606][T12542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 258.168324][T12542] tipc: Resetting bearer [ 258.221037][T12549] netlink: 'syz.2.1939': attribute type 11 has an invalid length. [ 258.293064][T12539] tipc: Resetting bearer [ 258.326470][T12539] tipc: Disabling bearer [ 258.796229][T12565] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1945'. [ 258.992758][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 259.122451][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 259.402699][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 259.412091][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 259.809488][T12626] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1963'. [ 259.882938][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 260.294831][T12652] dvmrp0: entered allmulticast mode [ 260.441227][T12661] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 260.453800][T12658] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 260.610673][T12667] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 260.652078][T12662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 260.679335][T12662] bond8: (slave bond9): making interface the new active one [ 260.688416][T12662] bond8: (slave bond9): Enslaving as an active interface with an up link [ 260.709528][T12657] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.723895][T12657] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 260.800930][T12667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.193176][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.199903][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.600243][T12708] syzkaller0: entered promiscuous mode [ 261.606022][T12708] syzkaller0: entered allmulticast mode [ 262.466956][ T5874] Bluetooth: hci0: command tx timeout [ 263.447114][T12726] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 263.476072][T12724] mpoa:mpoad_close: () going down [ 263.985515][T12765] __nla_validate_parse: 8 callbacks suppressed [ 263.985535][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 264.249532][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2011'. [ 264.333829][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 264.365211][T12786] sit3: entered promiscuous mode [ 264.383507][T12786] sit3: entered allmulticast mode [ 264.786869][T12806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2018'. [ 264.934238][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 265.035001][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 265.060184][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 265.465783][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2032'. [ 265.504469][T12844] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 265.655400][T12851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2033'. [ 265.735147][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2035'. [ 265.884173][T12855] veth5: entered promiscuous mode [ 265.900929][T12855] veth5: entered allmulticast mode [ 267.105410][T12917] lo: entered allmulticast mode [ 267.133224][T12917] lo: left allmulticast mode [ 268.147551][T12963] [ 268.150045][T12963] ====================================================== [ 268.157546][T12963] WARNING: possible circular locking dependency detected [ 268.164772][T12963] syzkaller #0 Not tainted [ 268.169201][T12963] ------------------------------------------------------ [ 268.176470][T12963] syz.2.2077/12963 is trying to acquire lock: [ 268.182635][T12963] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 268.192247][T12963] [ 268.192247][T12963] but task is already holding lock: [ 268.199739][T12963] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 268.209541][T12963] [ 268.209541][T12963] which lock already depends on the new lock. [ 268.209541][T12963] [ 268.220051][T12963] [ 268.220051][T12963] the existing dependency chain (in reverse order) is: [ 268.229096][T12963] [ 268.229096][T12963] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 268.237295][T12963] lock_acquire+0x120/0x360 [ 268.242345][T12963] _raw_spin_lock_bh+0x36/0x50 [ 268.247651][T12963] nr_rt_ioctl+0x390/0xd50 [ 268.252628][T12963] sock_do_ioctl+0xd9/0x300 [ 268.257680][T12963] sock_ioctl+0x576/0x790 [ 268.262556][T12963] __se_sys_ioctl+0xfc/0x170 [ 268.267704][T12963] do_syscall_64+0xfa/0x3b0 [ 268.272818][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.279346][T12963] [ 268.279346][T12963] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 268.287459][T12963] lock_acquire+0x120/0x360 [ 268.292516][T12963] _raw_spin_lock_bh+0x36/0x50 [ 268.297996][T12963] nr_rt_ioctl+0x193/0xd50 [ 268.303045][T12963] sock_do_ioctl+0xd9/0x300 [ 268.308181][T12963] sock_ioctl+0x576/0x790 [ 268.313046][T12963] __se_sys_ioctl+0xfc/0x170 [ 268.318174][T12963] do_syscall_64+0xfa/0x3b0 [ 268.323234][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.329742][T12963] [ 268.329742][T12963] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 268.337579][T12963] validate_chain+0xb9b/0x2140 [ 268.343050][T12963] __lock_acquire+0xab9/0xd20 [ 268.348281][T12963] lock_acquire+0x120/0x360 [ 268.353343][T12963] _raw_spin_lock_bh+0x36/0x50 [ 268.358660][T12963] nr_rt_device_down+0xa9/0x720 [ 268.364250][T12963] nr_device_event+0x137/0x150 [ 268.369644][T12963] notifier_call_chain+0x1b3/0x3e0 [ 268.375475][T12963] __dev_notify_flags+0x18d/0x2e0 [ 268.381574][T12963] netif_change_flags+0xe8/0x1a0 [ 268.387061][T12963] dev_change_flags+0x130/0x260 [ 268.392725][T12963] dev_ioctl+0x7b4/0x1150 [ 268.397782][T12963] sock_do_ioctl+0x22c/0x300 [ 268.402913][T12963] sock_ioctl+0x576/0x790 [ 268.408383][T12963] __se_sys_ioctl+0xfc/0x170 [ 268.413514][T12963] do_syscall_64+0xfa/0x3b0 [ 268.418571][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.425266][T12963] [ 268.425266][T12963] other info that might help us debug this: [ 268.425266][T12963] [ 268.435511][T12963] Chain exists of: [ 268.435511][T12963] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 268.435511][T12963] [ 268.449554][T12963] Possible unsafe locking scenario: [ 268.449554][T12963] [ 268.457116][T12963] CPU0 CPU1 [ 268.462498][T12963] ---- ---- [ 268.467985][T12963] lock(nr_neigh_list_lock); [ 268.472796][T12963] lock(&nr_node->node_lock); [ 268.480294][T12963] lock(nr_neigh_list_lock); [ 268.487775][T12963] lock(nr_node_list_lock); [ 268.492570][T12963] [ 268.492570][T12963] *** DEADLOCK *** [ 268.492570][T12963] [ 268.500853][T12963] 2 locks held by syz.2.2077/12963: [ 268.506078][T12963] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 268.514932][T12963] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 268.525743][T12963] [ 268.525743][T12963] stack backtrace: [ 268.532241][T12963] CPU: 1 UID: 0 PID: 12963 Comm: syz.2.2077 Not tainted syzkaller #0 PREEMPT(full) [ 268.532266][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.532288][T12963] Call Trace: [ 268.532299][T12963] [ 268.532308][T12963] dump_stack_lvl+0x189/0x250 [ 268.532338][T12963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.532359][T12963] ? __pfx__printk+0x10/0x10 [ 268.532385][T12963] ? print_lock_name+0xde/0x100 [ 268.532411][T12963] print_circular_bug+0x2ee/0x310 [ 268.532433][T12963] check_noncircular+0x134/0x160 [ 268.532456][T12963] validate_chain+0xb9b/0x2140 [ 268.532476][T12963] ? rt6_disable_ip+0x6b3/0x720 [ 268.532510][T12963] ? __lock_acquire+0xab9/0xd20 [ 268.532537][T12963] __lock_acquire+0xab9/0xd20 [ 268.532567][T12963] ? nr_rt_device_down+0xa9/0x720 [ 268.532586][T12963] lock_acquire+0x120/0x360 [ 268.532611][T12963] ? nr_rt_device_down+0xa9/0x720 [ 268.532637][T12963] ? nr_rt_device_down+0xa9/0x720 [ 268.532656][T12963] _raw_spin_lock_bh+0x36/0x50 [ 268.532677][T12963] ? nr_rt_device_down+0xa9/0x720 [ 268.532697][T12963] nr_rt_device_down+0xa9/0x720 [ 268.532717][T12963] ? do_raw_spin_unlock+0x122/0x240 [ 268.532741][T12963] nr_device_event+0x137/0x150 [ 268.532759][T12963] notifier_call_chain+0x1b3/0x3e0 [ 268.532787][T12963] __dev_notify_flags+0x18d/0x2e0 [ 268.532818][T12963] ? __pfx___dev_notify_flags+0x10/0x10 [ 268.532845][T12963] ? __dev_change_flags+0x4cc/0x6d0 [ 268.532864][T12963] ? __pfx___dev_change_flags+0x10/0x10 [ 268.532880][T12963] ? full_name_hash+0x92/0xe0 [ 268.532900][T12963] netif_change_flags+0xe8/0x1a0 [ 268.532919][T12963] dev_change_flags+0x130/0x260 [ 268.532947][T12963] dev_ioctl+0x7b4/0x1150 [ 268.532973][T12963] sock_do_ioctl+0x22c/0x300 [ 268.532995][T12963] ? __pfx_sock_do_ioctl+0x10/0x10 [ 268.533014][T12963] ? __lock_acquire+0xab9/0xd20 [ 268.533048][T12963] sock_ioctl+0x576/0x790 [ 268.533068][T12963] ? __pfx_sock_ioctl+0x10/0x10 [ 268.533088][T12963] ? __fget_files+0x2a/0x420 [ 268.533114][T12963] ? __fget_files+0x3a0/0x420 [ 268.533139][T12963] ? __fget_files+0x2a/0x420 [ 268.533166][T12963] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.533188][T12963] ? __pfx_sock_ioctl+0x10/0x10 [ 268.533208][T12963] __se_sys_ioctl+0xfc/0x170 [ 268.533230][T12963] do_syscall_64+0xfa/0x3b0 [ 268.533255][T12963] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.533277][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.533295][T12963] ? clear_bhb_loop+0x60/0xb0 [ 268.533314][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.533330][T12963] RIP: 0033:0x7f23a9d8ebe9 [ 268.533348][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.533363][T12963] RSP: 002b:00007f23aab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.533384][T12963] RAX: ffffffffffffffda RBX: 00007f23a9fb5fa0 RCX: 00007f23a9d8ebe9 [ 268.533397][T12963] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 268.533409][T12963] RBP: 00007f23a9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.533420][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.533430][T12963] R13: 00007f23a9fb6038 R14: 00007f23a9fb5fa0 R15: 00007ffcada7f3a8 [ 268.533451][T12963] [ 269.050064][T12481] udevd[12481]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory