last executing test programs: 8.000484763s ago: executing program 0 (id=1176): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x24020400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 7.564100448s ago: executing program 0 (id=1181): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300001900000000000000000000000400030000000000000000000000000001000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700ffffff800000000000000000000000000000000000000200010000000000000000020000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000030007000000000002"], 0xc8}}, 0x0) 7.387759555s ago: executing program 0 (id=1184): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x4040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000088000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r8, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6.738633041s ago: executing program 0 (id=1190): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r0, 0x9, 0x1, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r3, r1, 0x19, 0x2000, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback, r1, 0x2a, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendfile(r7, r6, 0x0, 0x79c3) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) 6.179492531s ago: executing program 1 (id=1196): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x88}, 0x0) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 5.975542431s ago: executing program 3 (id=1199): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc0343, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc0343, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="7c02000013002904000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x5e, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x74, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x6, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x44}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.945891026s ago: executing program 1 (id=1200): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x50}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket(0x23, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x4, 0x480000, {0x1c, 0x0, 0x80, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x27, 0x800, 0x1ff, 0x6, 0xfa, 0x3, 0x8, 0x0, 0x4, 0x10, 0xd, 0x3, 0x200, 0x3, 0x6, 0x7fffffff, [0x80000000, 0x3]}}) getpeername$packet(r5, 0x0, &(0x7f0000001140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a8090032000300"], 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 5.707192896s ago: executing program 3 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x196b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5.607342084s ago: executing program 0 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', r4, 0x7, 0x40, 0x8, 0x8, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@end, @rr={0x7, 0xb, 0xea, [@local, @broadcast]}]}}}}}) r5 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="23721f6568d62efe0d33133d880d88dde17bc9451e26001ab07c141300382518020c98105b27528c6e8621cb5b9d7a97cd5b038f6f45e196b770064cb285fec9ffb674b8b216409b6445a0bb77199fb9dbd5fec2812a99bc587747cc8be70db088ee7aefe0c7aa76f16cc26c9dccce150d10f65067238cd233723799627966b24e4e766b24951f9c2e1d7e63d4f172212b1cee964c", 0x95}, {&(0x7f0000000380)="fd5259bfa168b556cb71c8700aff13d73e9c622df848f27dfe2bd9e5005dc36f0945a51dc7a0a80127ababedb2a1cd707336610775e13824b84560827874fcd25d90e5b7bb3a20a088275e94228f14c4c35d26e16511497298b4dc88570559119ae10b90ac4ea5aa8a57cd52407b9161f32f4d329e8af0e2100401a3eef55946bf03c23441b02312cd18db5a66960a43497e826614448b85bce33cf673f81b", 0x9f}, {&(0x7f0000000540)="256d8a51722d95ca7503047d", 0xc}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.463641452s ago: executing program 3 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6a0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028006001000000000001400060000000000000000000000ffff000000000a000100aaaaaaaaaa000000"], 0x60}}, 0x0) 5.258711005s ago: executing program 3 (id=1210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) syz_emit_ethernet(0x4e, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@getneigh={0x14, 0x1e, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x44) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x8003, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000020000000b70500271e6ad9988a55000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.220163984s ago: executing program 0 (id=1211): bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffcdc) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @remote, 0xa}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xb}, 0x8) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000ea1b000000040000000e0000000000000100000000730007020f0000000000001010000000003030002fa63d0121927ec6a1f2ab02e36767a19e0d4ce9f6ca26f39e53e300e39d393e6d2a7c2ef354e3b253c3671d2b0861ecfe89681694560807d05149dcb15c35cb3598dbadeefb41018c3d977a19fdaed19107677d8ee2bcc521693bce41a0b8f36e5f395e712778c3685dda1a6923d16fc747162fd86f7e36c0cb1465b1b2be9aa56a56d5ecfaafd7d60a8ce1a66bdd9be80257567449732d4fe3"], &(0x7f0000000280)=""/13, 0x38, 0xd, 0x0, 0xea06, 0x10000, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="e600"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="05000000010000000400000000000000000000000000000000004000"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004001000040000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000007d6c939f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x90}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r10, 0x2000000, 0x13, 0x0, &(0x7f00000003c0)="13435cd378c66a90bd307e0add6affff1fc42f", 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x50) 4.699664221s ago: executing program 4 (id=1214): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="d81b4aca9ad511a433029f23cac6d2044c50b54ee3d99401006f9075948beb594832663377d62c8b858fe39c638229e470fc6594fe3e818b2ebce3778bcb926134765f1bf9a30cc14abf3cbb21511254b208478e9fc6"], 0xffdd) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c0000040008802000018006000600800a0000140019"], 0x38}}, 0x48000) 4.465603702s ago: executing program 4 (id=1216): recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/227, 0xe3}], 0x2, &(0x7f0000000280)=""/4, 0x4}, 0x2000) close(0xffffffffffffffff) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000003c0)=""/56, &(0x7f0000000400)=0x38) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000440)) bind$ax25(r1, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x48) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) r2 = epoll_create(0xfffffc01) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = socket(0x15, 0x800, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x1b, "fc16e4eabb1e9bcf62ea7aa1702bb4f5b4375c494defe3022b5642"}, &(0x7f00000005c0)=0x23) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000600)={r4, 0xfffffff8, 0xe08, 0xffffff05}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000680)={r4, 0x800, 0x5}, 0x8) sendmsg$key(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2, 0x11, 0xd, 0x9, 0x6, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0x9, 0x0, 0x2}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3502}]}, 0x30}}, 0x20008840) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000780)={@empty, 0x4, 0x3, 0x1, 0x2, 0x71, 0x25}, &(0x7f00000007c0)=0x20) sendmsg$kcm(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000800)="24c65c6836661e170ad0ce8d2592a7c10665ccc249c5512c85705967a824e34337e6e8b47046365778fa636a2e0248d2002386678f9051598165b9d2bbbc6607cd7483538fca78017e3e07a8f599fb5a657a58f225eac9ce4df5de9d228252a106cd999833dadc31f060bd20f3a10e67b38b5021407a103fccfdad628eb5693d520dee217bbce2c5aca337cd6eae0acdb87b833641ffbdfcfd213eaf861be06cb018a375c8f6dc63557e063960e255aa8d24", 0xb2}, {&(0x7f00000008c0)="5b4a31b6e0510eecfbc45e5bdf5404d145f17ee2dceb5ba376181b9c24ac66b1bb316c1f19236507c3076477a830ca918e5131c0926cf8561d884901cdffe7e25abf8a65c2c9b6dd37cda47178f29993c93118c00662f65c40f24a451746c7a0bd2720dd18236172af68dbd89d30b0f493514bd63ae27c45b3ae0fa622f8642f9a321d7a4e4a0793766ff6e00bfd4d574051241061813d9640f8a47ba3379f50a5af63bc9dd9d60ae0149dca912f4ea75c46131b3dd8e1c979c5b6db3dcc0a615bf02d616838c05e3119b1a99db64cd112aae6b1b7cd98a7136d235b13446db662995d57e621844e02d0f01074494ae5", 0xf0}, {&(0x7f00000009c0)="e12572365e2eb83cd36d2d4eba03678888656f01ee56f66e69fd07c76c7a10052d465816ef93f318aa91785b885e3574c1ed6ce35f21ce150ef88381ee102138ff943aa0b2c5753cbacff42276412b6af097220b795e1859876eece1b273f51ffea2b455a85ca0ce005b31e87963d455aed95adbad48703af105673bc3aa09be6062c39114817a08dba30780c92fc9bc2cad18a15579175422cae4a5dd11fb139779710b2e", 0xa5}, {&(0x7f0000000a80)="a47d8f25761409a814bf7216d28bf31d6bd70c6d066fbcb9348b2bfe68b2a11b0297547913f889cc8375a481", 0x2c}, {&(0x7f0000000ac0)="fc9dc3f23c5098b26828c4d367c3a6041ad4300545dd226b2b4c6b8a89540e1b3a98df67d3372f64189c5e8f171e4a5c356b69676e34afbcb69bc0c395b9b1cfbe0a6d066129963558e9468663a3fdbdaaf9b91f47427db9dd03dba9e7cb59d0462599b2f3186b23e218f8badb9169ee8791922ec580ac0c1e593d43c0bb923225555d45bc1953a580e9f6d182edcf08a67e085cdd3cfda5ab0050b1a0516dbafbae5460022d6ae2b7329a35fe52c6630d5f9d6b18f7f41628d883c8", 0xbc}, {&(0x7f0000000b80)="e6f2b00c6e990f1b618a4f99a66fbedec3192221b1c7ff9d9c61d5", 0x1b}], 0x6, &(0x7f0000000c40)=[{0x40, 0x10f, 0xfffffff8, "caae77b5ce56c4d63834b29ead2b2d8f9ad158ed9daed18d7ab83347480c65445f0766f2e935b4bc621f952821"}, {0x1010, 0x10e, 0xfffffff9, "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"}, {0x98, 0x11, 0x2, "ae890feaa62e5b507f4d2a8675813c413db13e2d7297dc1ffc37c9801f866281658571a0eeaf19f7fa0b138a4b91548bd0affbd24dff3d286e671ce2c5a49d4919c2eab27413319f2802f9e35f2a10693b0a93a4ba5183c614f3bf183fbf2fc1ffd87946183be2b9a8eeea56a7c9725c3be85659cc0bdcefda002789a7a30b0a037aa2c97122f061"}, {0x20, 0x1, 0x8, "20f556dd7532ae9076d22933c9"}, {0x80, 0x3a, 0x8, "c23e0cf5b07affd48ebc9d20afc781e5f964745bc8193ee0bfa16698651ed1e7f5e4f66c94748ea312536e1f1634966e37f3560d2f7cea09d6f616f180479ff6106064cbfd3899f137d92d9b2f9e3939aebf06f7b3ddbf97306d9a6af38fce95591cd39c2ba1bce3812292"}, {0xe0, 0x10f, 0x9, "4362279765560b4ab98a792ab5f4fbd31bb785f95808629665f73a60e0e2c35c821cde0445c40f88a354dfc87d2ada547e73014ff63b6124cc14272605158f3902c3bd186038ba333d4df64405d68b0167d3de661c48545298bdae92f0dbee6f0e48fac738fd78f2067646e2943bcc624cf9a91f9847b6b1ff71816c0fc52e5f817b04f661730d009a3e50e0257cd7514bbb06bf52f4dbbd286a96ecc3a6d31895abf1f9ee6e85a81838b86abb509069beda01fb3c6de4931880cd6e6def45a4669894a4b776b1a6596c1a0a82"}, {0x68, 0x107, 0xb, "2479aa939c6889ecc8e8a515475602f708176f24440a59ab69eab720ea8e175cbb9a57eb27eb22a2c7bc9fbcda926dc310b68606c66bc26cb59ade884a228d111937a0d0ab353cdc8326edc3b64109dcfdfb73cb44"}], 0x12d0}, 0x20044043) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000001f80)=@isdn={0x22, 0xff, 0x5, 0x5, 0x3}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)="05616be00ee83cea7fde558f4cff6ebc503770b9abe2d1ab7d780138f225365679288700bfb37d100fe77bb0cb92d441a20c9dc9a77e12605e1fe1bb6eef77fdd6dd4886d0a1e05b76c6530a0b874b23ec9da616070aa5ba2e8b11f96850a5b49a0e5326d908fc91ddac4bee927592e41c3bff7ed9c1e6b8b6894de389c056a54235f71e83dd017be37f0c23978c298b1db84face943b07e4d58bc5fb145da0f0ddbf1c7033147a9dc13f5e7ac758b91f47aca692d082997049ca96dd5cdbb001b5fe5df4316acba79c3f831a253d479167b219e79ed512ccf6c317a2048ea3cc2d1aa772d92c83656b41496a29fc79bab01caee7d76e82171a2", 0xfa}, {&(0x7f0000002100)="f8011a95e3aaa8579f83e922aad82eba49e5dbbf15e90e35edb0b9155933d3034e4f64f8b25c3cced208d6c00cb103fbb03e978e345bc54db5f783e69be9e384a9f9f08af65e36875511023b4d8ef00469b7b0fa4ecf4ffc168474974328a004b5a6e46ba24fa5888876b4805ceb92756d460728a70fed652ae8210db4fd96aa9835e5d9f8f827e870ada95e8aa1e38e7bba4413c7de0f563c48bdcc73e9cafe998765f9014c682db6b11d6d92fd23f846ea9186bf814b331e3ccac10201406d00ef114a8ae2208ea7", 0xc9}], 0x2, &(0x7f0000002240)=[{0x78, 0x104, 0x5, "dde75a86d0ff841ca49b8c0af463a4927d5913453d53bb8fd442dce7a617553e6e87e419cefcc276804b3d7e50e5cd8edc08b416b9cda7de37daefe6c5d1d6ed87a653124f2e758d95d1c7c5f509cdbf400645e980bfedbd973c1d7ef9abb361ab"}, {0x48, 0x0, 0xb, "053317c3275883ba329f0a22ad5ceb46367a04cd56c4599095f87ee7ebf9d19a64bd11652fdd3738010353ecd275a07271"}], 0xc0}}], 0x1, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r3) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000002380)={r4, 0x7fffffff}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f00000023c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0x10}, @enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x3, [{0xe, 0x7ff, 0xffffffff}, {0x2, 0x78, 0x7}, {0x9, 0x6, 0x1ff}, {0x8, 0x1, 0x1ff}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x5b, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x9, 0x3}, {0xf, 0x1}, {0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x2b, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000024c0)=""/50, 0xec, 0x32, 0x0, 0xa, 0x0, @void, @value}, 0x28) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002540)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r7, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000025c0)=[0x0, 0x0], &(0x7f0000002600)=[0x0, 0x0], 0x0, 0x34, &(0x7f0000002640)=[{}], 0x8, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000002700)}}, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000002880)={0x0, 0x3, 0xe}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4a722a832dad5bfa}, 0xc, &(0x7f0000002a00)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xb8, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xce}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xfc}}, 0x240000a0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000002a80)={0x1, 0x5, 0x8, 0xa694, r5}, 0x10) shutdown(0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000002d40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002b40)={0x1b4, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffd093}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) 4.294483413s ago: executing program 3 (id=1217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x0, 0x101, 0x3ff}, &(0x7f0000000780)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x8110) 4.071722234s ago: executing program 4 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x196b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.908639324s ago: executing program 1 (id=1219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70201000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x180800) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 3.874608981s ago: executing program 4 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000011) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000240)=0x7, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'veth1_to_batadv\x00', 0xaf5958200056d85c}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) 3.683324095s ago: executing program 1 (id=1221): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x9, 0x4) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'nicvf0\x00'}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="5cf9ff4f1eae3d68a8580207f922f478467bcb9cdd083783963e3671f77bb9d6339c5a800431c22d991898715afb905efff41a57c78c9af24a6fc8ba979de1c4d54e58c31e93dea93a544a21766e86a794f795c0c7a62e75abe61e5f6cf32f66c41f4f625c6bd475b6b49dd88459fa3d91227cc3a923bf7fe56044e32165033000", 0x81}], 0x1, &(0x7f0000000200)="5059c25e37a10535e76dc04922d58f84955d752f4f24bda2f33c6c6c9009092dbda5710a3b06f092072d87859af284e0fa9ead55f4116e3715e1844222ec", 0x3e, 0x4040840}, 0x40040) r2 = socket$inet(0x2, 0x6, 0x2f) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000002c0)={0x9}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x404a000) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x10, 0x7, 0x200, 0xa9b, 0x80, 0x4, 0x9, 0xffff, 0xfff}}) (async) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000540)) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000580)={'wg2\x00', 0x5}) (async) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000005c0)={@local, @loopback}, &(0x7f0000000600)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x10001, @mcast2, 0x400}], 0x3c) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f00000006c0)={0x0, 0x4}, 0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x6, 0x9, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xd, 0x3, 0x0, [{@local, 0x1d2}, {@remote, 0x101}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8000}, {@multicast2, 0x7f}]}]}}}}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@union={0xd, 0x6, 0x0, 0x5, 0x0, 0xc, [{0xb, 0x0, 0x8}, {0xc, 0x2, 0xc9}, {0x3, 0x0, 0x2}, {0x10, 0x0, 0xf}, {0x2, 0x1, 0x982}, {0x6, 0x4, 0x4cd}]}, @typedef={0xc}, @const={0xe, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f0000000a00)=""/58, 0x89, 0x3a, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xa, &(0x7f0000000740)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x4d, &(0x7f0000000800)=""/77, 0x40f00, 0x21, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000a80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xa, 0x1000000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r13, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d40), 0x10, 0x80000000, @void, @value}, 0x94) 3.45775028s ago: executing program 3 (id=1222): unshare(0x6a040000) (async) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f00000002c0)=[{r5, 0x1}, {r3, 0xa400}, {r0, 0xc000}, {r2, 0x4430}], 0x4, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000002c0)=[{r5, 0x1}, {r3, 0xa400}, {r0, 0xc000}, {r2, 0x4430}], 0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r7) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.276379913s ago: executing program 2 (id=1223): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020", @ANYRES32=0x0, @ANYRES64], 0x38}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) close(0x3) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000600)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r3, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r9, 0x29, 0x36, &(0x7f0000000080)=0x5, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.055481802s ago: executing program 1 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x10}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f0, 0x0, 0x118, 0x340, 0x240, 0x118, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, &(0x7f0000000080), {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffff00], 'gre0\x00', 'dvmrp1\x00', {0xff}, {}, 0x6af600068a973afd, 0x5, 0x0, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv4=@remote, 0x0, 0x3, 0x4}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0x0, 0xff], [0x0, 0x0, 0x33e5bf768dfa5800, 0xffffff00], 'team_slave_0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x58, 0x6, 0x10}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x8, 0x5, 0x1, 0xf2e5, 0x500, 0x100}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff], 'virt_wifi0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x4, 0x81, 0x3}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x7, 0x5, 0x3}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@remote, @private0, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xff0000ff, 0xff000000], 'syzkaller1\x00', 'syz_tun\x00', {}, {}, 0x33, 0xb, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@remote, 0x35, 0x7, 0xdd78}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2d, 0x14}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 3.04795519s ago: executing program 2 (id=1225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/71, 0x47) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x7}}, 0xbdd, 0xf4af}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={r6, 0x10001, 0x7, 0x7f, 0xfff, 0x0, 0x4, 0x375, {r7, @in6={{0xa, 0x4e23, 0x88, @mcast2, 0xe94}}, 0x98, 0xd3, 0x6f2b, 0x2}}, &(0x7f0000000400)=0xb0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80e00003ee60b00290200000000000000000a000000"], 0x14}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f00000000c0)=@netrom) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendto$inet6(r0, &(0x7f0000001180)='!', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0xffffffff, 0x7, 0x400, 0x9, 0x4, 0x7ff, 0x7, {0x0, @in6={{0xa, 0x4e20, 0x228, @rand_addr=' \x01\x00', 0x490d}}, 0x7ff, 0x3, 0x400, 0x1}}, &(0x7f0000000080)=0xb0) 2.821436146s ago: executing program 2 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="18001d801400008016000500c20000000500060001000000"], 0x34}}, 0x0) (async) unshare(0x20040600) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1060}}, 0x1) recvmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x140) 2.667557901s ago: executing program 2 (id=1227): clock_gettime(0x3, &(0x7f0000000380)={0x0}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="1b80fe27290a21106141b10b4fdc0f44d75b5706b59c4a342327cffc90e99fab32a1d097c5124caf90118e889017826cf9", 0x31}], 0x1}}], 0x1, 0x0) close(0x3) close(0x4) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) listen(r5, 0x10000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) 2.559279174s ago: executing program 2 (id=1228): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x8, 0x3c, 0x0, @empty, @mcast2, {[], {0x0, 0x1, 0x8}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000040)=0x3, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0xdd12}], 0x1}, 0x20040051) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x100007, 0x4) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000), 0x4) write$cgroup_int(r9, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) pwritev(r4, &(0x7f0000000280)=[{0x0}], 0x1, 0x98d, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 267.602177ms ago: executing program 4 (id=1229): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001000000cb6f13da239c3194bb6f55d27b4ed42c2f15532583512f36a89b3433bffa947397272d8b30060000000000000008755cdc41a5c4d26b34abba5efbc6b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) 143.773769ms ago: executing program 2 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x196b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 141.070922ms ago: executing program 1 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r3, 0x24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="0d000000010001", 0x7) setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) recvmsg(r6, &(0x7f0000001200)={&(0x7f00000000c0)=@caif=@util, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2, &(0x7f0000001140)=""/131, 0x83}, 0x2000) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="592585aa635693f7ca348756497f00cf57a1445ae2081299f1eef0062d093b139adfc2fa0449d5e689003599a5baf4e349d40100000069db2feb9452fa18d6428d096582a84cc19ba08b5e634e771ec61ca665981405dcd7d42b31acd7fb8082c20548e606dee5c88f5b44ea11a017ab8369a68095d7"], 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) accept(0xffffffffffffffff, &(0x7f0000000080)=@can, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 4 (id=1232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x0, 0x101, 0x3ff}, &(0x7f0000000780)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x8110) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 64.389615][ T5821] cgroup: Unknown subsys name 'net' [ 64.518226][ T5821] cgroup: Unknown subsys name 'cpuset' [ 64.526881][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.083000][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.389347][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.396711][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.406807][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.407668][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.422807][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.430390][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.441651][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.461108][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.471228][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.480514][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.488226][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.488392][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.496318][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.504570][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.519326][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.526125][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.527042][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.541407][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.542453][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.555752][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.558435][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.567271][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.576766][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.577857][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.585799][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.593441][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.613477][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.622293][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.635234][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.643226][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.995850][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.146049][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 69.198347][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 69.229547][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 69.294181][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.302639][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.310901][ T5832] bridge_slave_0: entered allmulticast mode [ 69.318463][ T5832] bridge_slave_0: entered promiscuous mode [ 69.366465][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.378225][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.385522][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.392740][ T5832] bridge_slave_1: entered allmulticast mode [ 69.399872][ T5832] bridge_slave_1: entered promiscuous mode [ 69.484286][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.506409][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.513588][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.521164][ T5840] bridge_slave_0: entered allmulticast mode [ 69.527918][ T5840] bridge_slave_0: entered promiscuous mode [ 69.549720][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.557372][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.564546][ T5841] bridge_slave_0: entered allmulticast mode [ 69.571868][ T5841] bridge_slave_0: entered promiscuous mode [ 69.591263][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.601304][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.608763][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.616314][ T5840] bridge_slave_1: entered allmulticast mode [ 69.623005][ T5840] bridge_slave_1: entered promiscuous mode [ 69.643263][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.650697][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.658502][ T5841] bridge_slave_1: entered allmulticast mode [ 69.665241][ T5841] bridge_slave_1: entered promiscuous mode [ 69.723476][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.764426][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.772058][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.779882][ T5842] bridge_slave_0: entered allmulticast mode [ 69.787114][ T5842] bridge_slave_0: entered promiscuous mode [ 69.796460][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.824676][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.851975][ T5832] team0: Port device team_slave_0 added [ 69.861575][ T5832] team0: Port device team_slave_1 added [ 69.868209][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.875772][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.883021][ T5842] bridge_slave_1: entered allmulticast mode [ 69.890129][ T5842] bridge_slave_1: entered promiscuous mode [ 69.913841][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.972721][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.987552][ T5840] team0: Port device team_slave_0 added [ 70.007671][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.014878][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.022468][ T5834] bridge_slave_0: entered allmulticast mode [ 70.029759][ T5834] bridge_slave_0: entered promiscuous mode [ 70.039724][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.048012][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.055414][ T5834] bridge_slave_1: entered allmulticast mode [ 70.062364][ T5834] bridge_slave_1: entered promiscuous mode [ 70.069653][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.076828][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.103339][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.117173][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.124162][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.150219][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.163295][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.173971][ T5840] team0: Port device team_slave_1 added [ 70.182512][ T5841] team0: Port device team_slave_0 added [ 70.233441][ T5841] team0: Port device team_slave_1 added [ 70.251330][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.263576][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.310561][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.317890][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.344584][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.385576][ T5832] hsr_slave_0: entered promiscuous mode [ 70.392142][ T5832] hsr_slave_1: entered promiscuous mode [ 70.401764][ T5842] team0: Port device team_slave_0 added [ 70.411381][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.419386][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.445737][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.458854][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.466025][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.492560][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.504924][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.512093][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.539329][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.559329][ T5834] team0: Port device team_slave_0 added [ 70.567804][ T5834] team0: Port device team_slave_1 added [ 70.576195][ T5842] team0: Port device team_slave_1 added [ 70.650959][ T5840] hsr_slave_0: entered promiscuous mode [ 70.657462][ T5840] hsr_slave_1: entered promiscuous mode [ 70.663413][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.672120][ T5840] Cannot create hsr debugfs directory [ 70.678762][ T5838] Bluetooth: hci0: command tx timeout [ 70.685365][ T5836] Bluetooth: hci3: command tx timeout [ 70.685409][ T5838] Bluetooth: hci4: command tx timeout [ 70.711882][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.718973][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.746089][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.757067][ T5838] Bluetooth: hci1: command tx timeout [ 70.757079][ T5836] Bluetooth: hci2: command tx timeout [ 70.782005][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.789457][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.815744][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.828573][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.835782][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.861943][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.881658][ T5841] hsr_slave_0: entered promiscuous mode [ 70.889084][ T5841] hsr_slave_1: entered promiscuous mode [ 70.895012][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.902889][ T5841] Cannot create hsr debugfs directory [ 70.910990][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.918225][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.944193][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.024860][ T5842] hsr_slave_0: entered promiscuous mode [ 71.031502][ T5842] hsr_slave_1: entered promiscuous mode [ 71.037909][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.045655][ T5842] Cannot create hsr debugfs directory [ 71.135461][ T5834] hsr_slave_0: entered promiscuous mode [ 71.141607][ T5834] hsr_slave_1: entered promiscuous mode [ 71.148817][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.157058][ T5834] Cannot create hsr debugfs directory [ 71.380643][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.413249][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.440582][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.459296][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.492312][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.513056][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.536530][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.559383][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.600334][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.610444][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.636671][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.647478][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.716428][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.727132][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.777369][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.800666][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.807628][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.819374][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.829548][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.842873][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.854793][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.864414][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.927714][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.011488][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.030466][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.048021][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.070623][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.077980][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.110589][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.128042][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.135243][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.144882][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.152198][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.161342][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.168869][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.182205][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.224264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.231423][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.242908][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.250133][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.270491][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.316836][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.362907][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.383487][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.412540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.419826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.452709][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.459878][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.473373][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.505696][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.513212][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.527571][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.534743][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.677765][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.698457][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.756208][ T5838] Bluetooth: hci3: command tx timeout [ 72.756227][ T5836] Bluetooth: hci4: command tx timeout [ 72.756265][ T5836] Bluetooth: hci0: command tx timeout [ 72.824182][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.839047][ T5851] Bluetooth: hci2: command tx timeout [ 72.844759][ T5836] Bluetooth: hci1: command tx timeout [ 72.959390][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.054406][ T5840] veth0_vlan: entered promiscuous mode [ 73.100524][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.163830][ T5840] veth1_vlan: entered promiscuous mode [ 73.184899][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.287627][ T5840] veth0_macvtap: entered promiscuous mode [ 73.310808][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.328599][ T5840] veth1_macvtap: entered promiscuous mode [ 73.368633][ T5832] veth0_vlan: entered promiscuous mode [ 73.397500][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.430359][ T5832] veth1_vlan: entered promiscuous mode [ 73.449044][ T5841] veth0_vlan: entered promiscuous mode [ 73.458920][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.482008][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.492230][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.501538][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511045][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.524444][ T5834] veth0_vlan: entered promiscuous mode [ 73.539674][ T5841] veth1_vlan: entered promiscuous mode [ 73.581668][ T5834] veth1_vlan: entered promiscuous mode [ 73.594329][ T5832] veth0_macvtap: entered promiscuous mode [ 73.614944][ T5832] veth1_macvtap: entered promiscuous mode [ 73.632854][ T5842] veth0_vlan: entered promiscuous mode [ 73.664466][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.679145][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.690808][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.703509][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.714316][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.725385][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.765622][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.774471][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783664][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793220][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.827700][ T5841] veth0_macvtap: entered promiscuous mode [ 73.835884][ T5842] veth1_vlan: entered promiscuous mode [ 73.846227][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.858429][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.881035][ T5834] veth0_macvtap: entered promiscuous mode [ 73.894943][ T5841] veth1_macvtap: entered promiscuous mode [ 73.915288][ T5834] veth1_macvtap: entered promiscuous mode [ 73.937921][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.952003][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.958579][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.970907][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.981230][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.991753][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.003064][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.014971][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.027128][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.040094][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.051180][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.062873][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.101910][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.119434][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.130085][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.140836][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.151226][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.161760][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.173597][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.187839][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.212708][ T5842] veth0_macvtap: entered promiscuous mode [ 74.223248][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.232619][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.243037][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252151][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269758][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.282057][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.292296][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.303044][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.313064][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.323571][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.334803][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.426250][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437379][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447111][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456684][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.485046][ T5842] veth1_macvtap: entered promiscuous mode [ 74.590840][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.603928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.700570][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.716355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.752323][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.764602][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.772835][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 74.782554][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.788158][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 74.802070][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.812549][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.824796][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.835015][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.835293][ T5836] Bluetooth: hci0: command tx timeout [ 74.845873][ T5851] Bluetooth: hci3: command tx timeout [ 74.851362][ T5836] Bluetooth: hci4: command tx timeout [ 74.852319][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.853871][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.890694][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.902571][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.913623][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.924451][ T5838] Bluetooth: hci2: command tx timeout [ 74.924546][ T5851] Bluetooth: hci1: command tx timeout [ 74.942384][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.952813][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.964103][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.974100][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.984885][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.998124][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.034015][ T5926] erspan0: entered promiscuous mode [ 75.041638][ T5926] gretap0: entered promiscuous mode [ 75.097474][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.105557][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.173293][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.184907][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.241541][ T5929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.252600][ T5929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.263177][ T5929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.272164][ T5929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.323659][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.327056][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.385204][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.415242][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.424205][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.478152][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509903][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.525752][ T5935] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 75.599879][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.624816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.678441][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 75.703425][ T5932] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 75.708657][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.766935][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.867411][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.885947][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.036793][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.044873][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.171531][ T5946] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 76.484310][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 76.511055][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.517664][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 76.535996][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 76.556346][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.562928][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 76.607042][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.620670][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.915636][ T5838] Bluetooth: hci0: command tx timeout [ 76.921943][ T5851] Bluetooth: hci4: command tx timeout [ 76.928505][ T5838] Bluetooth: hci3: command tx timeout [ 76.996130][ T5838] Bluetooth: hci2: command tx timeout [ 77.002424][ T5851] Bluetooth: hci1: command tx timeout [ 77.189507][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'. [ 77.225961][ T5975] @ÿ: renamed from bond_slave_0 (while UP) [ 77.447258][ T5986] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 77.575323][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15'. [ 77.584506][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 77.602733][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.629803][ T5982] lo speed is unknown, defaulting to 1000 [ 77.664120][ T5994] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 77.704631][ T5982] lo speed is unknown, defaulting to 1000 [ 77.725810][ T5994] Zero length message leads to an empty skb [ 77.752369][ T5982] lo speed is unknown, defaulting to 1000 [ 77.823569][ T5982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.872914][ T5982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 77.986116][ T6003] netlink: 'syz.4.19': attribute type 11 has an invalid length. [ 78.008850][ T5982] lo speed is unknown, defaulting to 1000 [ 78.016616][ T5982] lo speed is unknown, defaulting to 1000 [ 78.023940][ T5982] lo speed is unknown, defaulting to 1000 [ 78.033423][ T5982] lo speed is unknown, defaulting to 1000 [ 78.050731][ T5982] lo speed is unknown, defaulting to 1000 [ 78.107080][ T6007] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 78.176431][ T6008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 78.264388][ T6005] lo speed is unknown, defaulting to 1000 [ 78.327551][ T6015] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.357932][ T6015] IPv6: Can't replace route, no match found [ 78.406205][ T5982] lo speed is unknown, defaulting to 1000 [ 78.510273][ T6020] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.630836][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.681692][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.773024][ T6030] ip6t_srh: unknown srh match flags 5294 [ 78.954974][ T6033] tap0: tun_chr_ioctl cmd 1074025677 [ 78.962065][ T6033] tap0: linktype set to 6 [ 79.331645][ T6045] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 79.776170][ T6070] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 79.820506][ T6069] __nla_validate_parse: 11 callbacks suppressed [ 79.820527][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.849833][ T6066] lo speed is unknown, defaulting to 1000 [ 79.850056][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.117337][ T6081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.258980][ T6087] netlink: 'syz.0.39': attribute type 10 has an invalid length. [ 80.289224][ T6087] team0: Port device wlan1 added [ 80.376443][ T6094] macsec0: entered promiscuous mode [ 80.393794][ T6094] macsec0: entered allmulticast mode [ 80.596733][ T6105] netlink: 211456 bytes leftover after parsing attributes in process `syz.4.47'. [ 80.606704][ T6105] netlink: zone id is out of range [ 80.612016][ T6105] netlink: get zone limit has 8 unknown bytes [ 80.621483][ T6105] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 81.130851][ T6118] lo speed is unknown, defaulting to 1000 [ 81.306764][ T6132] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.55'. [ 81.371996][ T6132] openvswitch: netlink: Key type 16134 is out of range max 32 [ 81.539880][ T6143] lo speed is unknown, defaulting to 1000 [ 81.670105][ T6148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.716273][ T6148] sctp: [Deprecated]: syz.2.60 (pid 6148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.716273][ T6148] Use struct sctp_sack_info instead [ 81.796547][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 81.837140][ T6151] wg1: entered promiscuous mode [ 81.851490][ T6151] wg1: entered allmulticast mode [ 82.241917][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 82.463590][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 82.479768][ T6163] syzkaller0: entered promiscuous mode [ 82.489515][ T6163] syzkaller0: entered allmulticast mode [ 82.504065][ T977] cfg80211: failed to load regulatory.db [ 82.560990][ T6144] pim6reg: entered allmulticast mode [ 82.606085][ T6143] Bluetooth: MGMT ver 1.23 [ 82.672870][ T6143] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 84.814339][ T6142] pim6reg: left allmulticast mode [ 85.384460][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 85.881952][ T6218] macsec0: left promiscuous mode [ 85.897195][ T6218] macsec0: left allmulticast mode [ 86.004803][ T5885] IPVS: starting estimator thread 0... [ 86.056996][ T6218] bridge0: port 3(gretap0) entered blocking state [ 86.097818][ T6218] bridge0: port 3(gretap0) entered disabled state [ 86.128060][ T6218] gretap0: entered allmulticast mode [ 86.135588][ T6220] IPVS: using max 21 ests per chain, 50400 per kthread [ 86.161231][ T6218] gretap0: left allmulticast mode [ 86.433645][ T6240] sctp: [Deprecated]: syz.1.84 (pid 6240) Use of int in max_burst socket option. [ 86.433645][ T6240] Use struct sctp_assoc_value instead [ 86.512539][ T6240] xt_TCPMSS: Only works on TCP SYN packets [ 86.676804][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.772537][ T6251] lo speed is unknown, defaulting to 1000 [ 86.805335][ T6261] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 86.806286][ T6262] IPVS: stopping master sync thread 6263 ... [ 86.819806][ T6263] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 86.940136][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.955534][ T6270] bridge0: port 3(vlan2) entered blocking state [ 86.972739][ T6270] bridge0: port 3(vlan2) entered disabled state [ 86.993477][ T6270] vlan2: entered allmulticast mode [ 87.039013][ T6270] vlan2: left allmulticast mode [ 87.501863][ T6284] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 87.515284][ T6284] netlink: 'syz.2.97': attribute type 3 has an invalid length. [ 87.533447][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.97'. [ 88.337675][ T6319] sctp: failed to load transform for md5: -2 [ 88.422681][ T6331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 88.550000][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 88.866490][ T6350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.873922][ T6350] IPv6: NLM_F_CREATE should be set when creating new route [ 88.914641][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 88.963076][ T6352] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 88.971917][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 89.038076][ T6352] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 89.196185][ T6364] lo speed is unknown, defaulting to 1000 [ 89.246552][ T6366] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 89.358595][ T6369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.124'. [ 89.390009][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'. [ 89.400281][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 89.507065][ T6366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.634900][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.666627][ T6370] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 89.698662][ T6370] bond1: (slave vcan1): Error -95 calling set_mac_address [ 90.599727][ T6419] tipc: Started in network mode [ 90.604870][ T6419] tipc: Node identity 46d861f0ca53, cluster identity 4711 [ 90.612902][ T6419] tipc: Enabled bearer , priority 0 [ 90.750313][ T6419] syzkaller0: entered promiscuous mode [ 90.758237][ T6419] syzkaller0: entered allmulticast mode [ 90.766718][ T6419] tipc: Resetting bearer [ 90.842705][ T6424] __nla_validate_parse: 2 callbacks suppressed [ 90.842726][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 90.888107][ T6416] tipc: Resetting bearer [ 91.058856][ T6444] sctp: [Deprecated]: syz.1.140 (pid 6444) Use of int in max_burst socket option. [ 91.058856][ T6444] Use struct sctp_assoc_value instead [ 91.303331][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 91.600553][ T6456] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 91.629937][ T5885] tipc: Node number set to 2357944816 [ 91.771759][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.143'. [ 91.781031][ T6458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 91.791182][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.143'. [ 91.800941][ T6458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.143'. [ 93.043318][ T6416] tipc: Disabling bearer [ 93.060073][ T6450] 8021q: VLANs not supported on nlmon0 [ 93.118575][ T6456] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 93.230904][ T6455] lo speed is unknown, defaulting to 1000 [ 93.329696][ T6466] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 93.376030][ T6466] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 93.389954][ T6466] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.146'. [ 93.506471][ T6469] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.529400][ T6469] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.642248][ T6477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.148'. [ 93.678197][ T6469] lo speed is unknown, defaulting to 1000 [ 93.768979][ T6480] lo speed is unknown, defaulting to 1000 [ 93.833181][ T6474] lo speed is unknown, defaulting to 1000 [ 94.163624][ T6492] vxcan3: entered allmulticast mode [ 94.743860][ T5917] IPVS: starting estimator thread 0... [ 94.812544][ T6505] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 94.867850][ T6509] IPVS: using max 21 ests per chain, 50400 per kthread [ 95.048709][ T6513] lo speed is unknown, defaulting to 1000 [ 95.130735][ T6510] lo speed is unknown, defaulting to 1000 [ 95.174405][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 95.475387][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 95.645045][ T6529] syz.3.159 (6529) used greatest stack depth: 16720 bytes left [ 95.897217][ T6546] netlink: 116 bytes leftover after parsing attributes in process `syz.1.162'. [ 95.944129][ T6546] tc_dump_action: action bad kind [ 95.967434][ T6557] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 95.979633][ T6553] lo speed is unknown, defaulting to 1000 [ 96.088472][ T6558] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 96.265763][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 96.354670][ T6558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.367370][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 96.370863][ T6566] lo speed is unknown, defaulting to 1000 [ 96.424424][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 96.447648][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 96.508137][ T6578] netlink: 830 bytes leftover after parsing attributes in process `syz.1.167'. [ 97.299213][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 97.616293][ T6625] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 97.625646][ T6625] x_tables: duplicate underflow at hook 1 [ 97.638727][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 97.664615][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.178'. [ 97.978158][ T6630] netlink: 'syz.4.179': attribute type 4 has an invalid length. [ 98.022236][ T6636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.180'. [ 98.065749][ T6638] lo speed is unknown, defaulting to 1000 [ 98.118341][ T6640] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 98.215831][ T6640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.287965][ T6642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.295434][ T6642] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 98.315929][ T6642] bond2: (slave vcan1): Error -95 calling set_mac_address [ 99.157101][ T6674] Unsupported ieee802154 address type: 0 [ 99.508054][ T6691] pimreg: entered allmulticast mode [ 99.539906][ T6691] 8021q: VLANs not supported on pimreg [ 99.624331][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.643155][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.278582][ T6732] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 100.317038][ T6730] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 100.561359][ T6744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 101.298861][ T6779] __nla_validate_parse: 13 callbacks suppressed [ 101.298884][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 101.333219][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 101.350421][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 101.362402][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 101.438259][ T6781] netlink: 176 bytes leftover after parsing attributes in process `syz.1.222'. [ 101.444634][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 101.512709][ T6790] netlink: 9 bytes leftover after parsing attributes in process `syz.2.223'. [ 101.635244][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 101.810399][ T6790] gretap0: entered promiscuous mode [ 101.873962][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 101.898494][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 102.441208][ T6827] dummy0: entered promiscuous mode [ 102.483897][ T6827] dummy0: left promiscuous mode [ 102.624177][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 102.880473][ T6846] bridge_slave_0: left allmulticast mode [ 102.882392][ T6839] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 102.895074][ T6846] bridge_slave_0: left promiscuous mode [ 102.900923][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.913900][ T6851] No such timeout policy "syz0" [ 102.941998][ T6843] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 102.942131][ T6846] bridge_slave_1: left allmulticast mode [ 102.962732][ T6846] bridge_slave_1: left promiscuous mode [ 102.970850][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.994778][ T6846] bond0: (slave bond_slave_0): Releasing backup interface [ 103.006395][ T6856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 103.029445][ T6846] bond0: (slave bond_slave_1): Releasing backup interface [ 103.096017][ T6846] team0: Port device team_slave_0 removed [ 103.160805][ T6846] team0: Port device team_slave_1 removed [ 103.173542][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.205065][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.224009][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.240784][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.283630][ T977] lo speed is unknown, defaulting to 1000 [ 103.313553][ T6839] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.374306][ T6853] lo speed is unknown, defaulting to 1000 [ 103.769292][ T6854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.918752][ T6880] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 103.954947][ T6880] x_tables: duplicate underflow at hook 1 [ 104.384979][ T6893] syzkaller0: entered promiscuous mode [ 104.422735][ T6893] syzkaller0: entered allmulticast mode [ 104.591763][ T6898] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 104.884138][ T6911] lo speed is unknown, defaulting to 1000 [ 104.912918][ T6912] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 105.021521][ T6912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.029263][ T6914] netlink: 'syz.0.258': attribute type 13 has an invalid length. [ 105.077246][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.693759][ T6931] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 107.109015][ T6917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.116203][ T6917] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 107.128377][ T6917] bond2: (slave vcan1): Error -95 calling set_mac_address [ 107.401580][ T6936] syzkaller0: entered promiscuous mode [ 107.416749][ T6936] syzkaller0: entered allmulticast mode [ 107.476021][ T6946] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 107.493300][ T6946] __nla_validate_parse: 11 callbacks suppressed [ 107.493320][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 107.582144][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 107.730636][ T6954] lo speed is unknown, defaulting to 1000 [ 107.794781][ T6957] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 107.923728][ T6965] netlink: 70 bytes leftover after parsing attributes in process `syz.2.271'. [ 107.935441][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 107.953926][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 107.977628][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 107.995412][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 109.834808][ T6957] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 109.840827][ T6961] netem: incorrect ge model size [ 109.857356][ T6961] netem: change failed [ 109.863544][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 109.888942][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 110.077352][ T6988] netlink: 144 bytes leftover after parsing attributes in process `syz.4.275'. [ 110.444690][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.752007][ T7017] lo speed is unknown, defaulting to 1000 [ 110.903781][ T7026] netlink: 'syz.0.284': attribute type 4 has an invalid length. [ 111.368451][ T30] audit: type=1800 audit(1742339350.166:2): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.289" name="memory.events" dev="tmpfs" ino=261 res=0 errno=0 [ 111.429170][ T7042] lo speed is unknown, defaulting to 1000 [ 111.435901][ T30] audit: type=1800 audit(1742339350.206:3): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.289" name="memory.events" dev="tmpfs" ino=261 res=0 errno=0 [ 111.474270][ T30] audit: type=1804 audit(1742339350.256:4): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.289" name="memory.events" dev="tmpfs" ino=261 res=1 errno=0 [ 111.526906][ T30] audit: type=1804 audit(1742339350.256:5): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.289" name="memory.events" dev="tmpfs" ino=261 res=1 errno=0 [ 112.036850][ T7065] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 112.068583][ T7061] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 112.108916][ T7065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.288324][ T7067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.324779][ T7069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.333871][ T7069] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 112.357663][ T7069] bond4: (slave vcan1): Error -95 calling set_mac_address [ 112.386438][ T7064] lo speed is unknown, defaulting to 1000 [ 112.421009][ T7067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.552253][ T7067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.584819][ T7075] lo speed is unknown, defaulting to 1000 [ 112.654578][ T7067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.923679][ T7067] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.040621][ T7067] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.120248][ T7067] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.210521][ T7067] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.297101][ T7099] __nla_validate_parse: 8 callbacks suppressed [ 113.297120][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 113.432601][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 113.467811][ T7109] netlink: 312 bytes leftover after parsing attributes in process `syz.2.304'. [ 113.844942][ T7123] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 113.883122][ T7120] lo speed is unknown, defaulting to 1000 [ 113.933907][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.040268][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.067463][ T7132] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 114.090410][ T7123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 114.099709][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 114.111440][ T7132] bond1: (slave vcan1): Error -95 calling set_mac_address [ 114.121306][ T7123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 114.131732][ T7123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 114.566107][ T7156] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 114.653053][ T7151] vlan2: entered promiscuous mode [ 114.727546][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.735377][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.783061][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.790465][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.798034][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.805412][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.841089][ T7156] bridge0: entered promiscuous mode [ 114.850999][ T7156] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.910989][ T7165] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.244465][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 115.325749][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 115.431067][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 116.247323][ T7220] tipc: Enabling of bearer rejected, failed to enable media [ 116.710631][ T7227] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 117.170036][ T7241] netlink: 'syz.1.343': attribute type 7 has an invalid length. [ 117.594819][ T7255] syzkaller0: entered allmulticast mode [ 117.629408][ T7258] tipc: Started in network mode [ 117.636471][ T7258] tipc: Node identity 1, cluster identity 8 [ 117.644143][ T7258] tipc: Node number set to 1 [ 118.443357][ T7263] Bluetooth: MGMT ver 1.23 [ 119.822470][ T7267] lo speed is unknown, defaulting to 1000 [ 119.976328][ T7270] __nla_validate_parse: 12 callbacks suppressed [ 119.976350][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 120.156700][ T7278] lo speed is unknown, defaulting to 1000 [ 120.169672][ T7273] netlink: 'syz.3.350': attribute type 11 has an invalid length. [ 120.195064][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.350'. [ 120.308906][ T7282] netlink: 830 bytes leftover after parsing attributes in process `syz.4.353'. [ 120.384443][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 120.704763][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 122.047797][ T7357] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.083243][ T7356] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 122.306351][ T7367] netlink: 'syz.0.377': attribute type 27 has an invalid length. [ 122.411891][ T7367] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.430535][ T7367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.855797][ T7379] netlink: 156 bytes leftover after parsing attributes in process `syz.3.383'. [ 123.358770][ T7403] bridge_slave_0: invalid flags given to default FDB implementation [ 123.669497][ T7420] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.672802][ T7415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.770216][ T7415] bridge0: port 3(bond1) entered blocking state [ 123.819411][ T7415] bridge0: port 3(bond1) entered disabled state [ 123.841538][ T7415] bond1: entered allmulticast mode [ 123.849283][ T7415] bond1: entered promiscuous mode [ 123.859214][ T7415] bridge0: port 3(bond1) entered blocking state [ 123.866048][ T7415] bridge0: port 3(bond1) entered forwarding state [ 123.893155][ T6231] bridge0: port 3(bond1) entered disabled state [ 123.921650][ T7432] bridge0: port 1(batadv1) entered blocking state [ 123.939459][ T7432] bridge0: port 1(batadv1) entered disabled state [ 123.969240][ T7432] batadv1: entered allmulticast mode [ 123.999729][ T7432] batadv1: entered promiscuous mode [ 124.170536][ T7440] lo speed is unknown, defaulting to 1000 [ 124.189211][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 124.324888][ T7447] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 124.386956][ T7430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.410350][ T7447] lo speed is unknown, defaulting to 1000 [ 124.457093][ T6230] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 124.467377][ T6230] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 124.519471][ T7430] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 124.586862][ T7457] tap0: tun_chr_ioctl cmd 1074025677 [ 124.616647][ T7457] tap0: linktype set to 804 [ 125.419422][ T7472] batadv_slave_1: entered promiscuous mode [ 125.441955][ T7472] batadv_slave_1: left promiscuous mode [ 126.136372][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 126.265753][ T7514] netlink: 224 bytes leftover after parsing attributes in process `syz.2.411'. [ 126.418724][ T7495] team0 (unregistering): Port device team_slave_0 removed [ 126.432350][ T7495] team0 (unregistering): Port device team_slave_1 removed [ 126.466028][ T7502] IPVS: Error connecting to the multicast addr [ 126.999408][ T7529] lo speed is unknown, defaulting to 1000 [ 127.135223][ T7551] netlink: 156 bytes leftover after parsing attributes in process `syz.4.422'. [ 127.213547][ T7547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.369686][ T7547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.460599][ T7556] lo speed is unknown, defaulting to 1000 [ 127.520503][ T7547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.679924][ T7547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.852853][ T7547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.872742][ T7547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.906501][ T7547] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.943708][ T7547] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.201884][ T7575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.867554][ T7599] pimreg: left allmulticast mode [ 128.948046][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 130.404221][ T7685] tun0: tun_chr_ioctl cmd 1074025675 [ 130.423117][ T7685] tun0: persist enabled [ 130.431716][ T7685] tun0: tun_chr_ioctl cmd 1074025675 [ 130.443746][ T7685] tun0: persist disabled [ 130.453736][ T7685] netlink: 68 bytes leftover after parsing attributes in process `syz.4.457'. [ 130.539544][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 130.672852][ T7693] lo speed is unknown, defaulting to 1000 [ 130.725064][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 130.772880][ T7699] lo speed is unknown, defaulting to 1000 [ 130.840953][ T7701] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 130.919222][ T7701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.003367][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.462'. [ 131.013083][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 131.034658][ T7703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.042420][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.462'. [ 131.056263][ T7703] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 131.090487][ T7703] bond2: (slave vcan1): Error -95 calling set_mac_address [ 131.183829][ T7707] bridge0: port 4(hsr0) entered blocking state [ 131.190538][ T7707] bridge0: port 4(hsr0) entered disabled state [ 131.224295][ T7707] hsr0: entered allmulticast mode [ 131.257330][ T7707] hsr_slave_0: entered allmulticast mode [ 131.294033][ T7707] hsr_slave_1: entered allmulticast mode [ 131.303728][ T7707] hsr0: entered promiscuous mode [ 131.313042][ T7707] bridge0: port 4(hsr0) entered blocking state [ 131.319736][ T7707] bridge0: port 4(hsr0) entered forwarding state [ 131.633852][ T7731] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.821525][ T7729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.954321][ T7736] __nla_validate_parse: 1 callbacks suppressed [ 131.954341][ T7736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.472'. [ 132.343466][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 133.240837][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.897993][ T7729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.912182][ T7739] netlink: 'syz.0.473': attribute type 248 has an invalid length. [ 134.013916][ T7748] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 134.130446][ T7729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.328504][ T7729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.425812][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 134.445861][ T7759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.479'. [ 134.473382][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 134.483898][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.479'. [ 134.706898][ T7770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.483'. [ 134.883589][ T7729] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.968720][ T7729] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.991289][ T7775] netlink: 'syz.1.486': attribute type 4 has an invalid length. [ 135.009702][ T7729] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.037971][ T7729] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.062554][ T7780] bridge0: port 3(gretap0) entered blocking state [ 135.082558][ T7780] bridge0: port 3(gretap0) entered disabled state [ 135.105831][ T7780] gretap0: entered allmulticast mode [ 135.114678][ T7780] gretap0: left allmulticast mode [ 135.138579][ T7779] syzkaller1: tun_chr_ioctl cmd 2147783523 [ 135.169787][ T7779] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 135.191023][ T7779] syzkaller1: Refused to change device type [ 135.325824][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 135.637937][ T7795] tipc: New replicast peer: 255.255.255.255 [ 135.663146][ T7795] tipc: Enabled bearer , priority 10 [ 135.726156][ T7799] netlink: 340 bytes leftover after parsing attributes in process `syz.2.494'. [ 135.893126][ T7802] No such timeout policy "syz0" [ 135.988690][ T7807] netlink: 'syz.0.498': attribute type 3 has an invalid length. [ 136.272811][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 136.283880][ T7821] IPVS: Unknown mcast interface: virt_wifi0 [ 136.296009][ T7820] netlink: 'syz.0.501': attribute type 12 has an invalid length. [ 136.377163][ T7821] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 136.428543][ T7823] hsr0: left allmulticast mode [ 136.433488][ T7823] hsr_slave_0: left allmulticast mode [ 136.443352][ T7823] hsr_slave_1: left allmulticast mode [ 136.449377][ T7823] hsr0: left promiscuous mode [ 136.454577][ T7823] bridge0: port 4(hsr0) entered disabled state [ 136.463727][ T7823] bond1: left allmulticast mode [ 136.469102][ T7823] bond1: left promiscuous mode [ 136.474290][ T7823] bridge0: port 3(bond1) entered disabled state [ 136.483655][ T7823] bridge_slave_1: left allmulticast mode [ 136.489592][ T7823] bridge_slave_1: left promiscuous mode [ 136.497488][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.507536][ T7823] bridge_slave_0: left allmulticast mode [ 136.513374][ T7823] bridge_slave_0: left promiscuous mode [ 136.519829][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.549077][ T7823] bridge0: left promiscuous mode [ 136.569328][ T7823] bond0: (slave bridge0): Releasing backup interface [ 136.656295][ T7821] team0: Device veth1_macvtap failed to register rx_handler [ 136.933310][ T7831] lo speed is unknown, defaulting to 1000 [ 137.333832][ T7848] nbd: couldn't find device at index 1255035857 [ 137.341223][ T7845] lo speed is unknown, defaulting to 1000 [ 137.471696][ T7860] netlink: 'syz.3.514': attribute type 32 has an invalid length. [ 137.560229][ T7860] __nla_validate_parse: 4 callbacks suppressed [ 137.560260][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 137.620483][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 137.670382][ T7860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.514'. [ 137.850912][ T7865] syzkaller1: entered promiscuous mode [ 137.870192][ T7865] syzkaller1: entered allmulticast mode [ 138.379611][ T7845] nft_compat: unsupported protocol 42 [ 138.380709][ T7886] lo speed is unknown, defaulting to 1000 [ 138.402945][ T7893] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.666622][ T7893] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 138.689356][ T7893] IPVS: set_ctl: invalid protocol: 239 255.255.255.255:20002 [ 138.771192][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'. [ 139.118079][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 139.153618][ T7913] hsr_slave_0: left promiscuous mode [ 139.165683][ T7913] hsr_slave_1: left promiscuous mode [ 139.421333][ T7919] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 139.534496][ T7923] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 140.012938][ T7919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.089831][ T7921] bond4: (slave dummy0): making interface the new active one [ 140.124344][ T7921] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 140.156987][ T7933] netlink: 'syz.3.529': attribute type 2 has an invalid length. [ 140.374691][ T7940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.531'. [ 140.412871][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 140.703447][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.532'. [ 140.989899][ T7958] syzkaller0: entered promiscuous mode [ 140.995766][ T7958] syzkaller0: entered allmulticast mode [ 141.024561][ T7968] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.033689][ T7968] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.042372][ T7968] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.050922][ T7968] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.556966][ T5838] Bluetooth: hci1: command 0x0401 tx timeout [ 141.605029][ T7981] netlink: 'syz.1.541': attribute type 9 has an invalid length. [ 141.613448][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 143.410297][ T7981] hsr0: entered promiscuous mode [ 143.445493][ T7981] macvlan2: entered promiscuous mode [ 143.466238][ T7981] macvlan2: entered allmulticast mode [ 143.471692][ T7981] hsr0: entered allmulticast mode [ 143.509838][ T7985] ax25_connect(): syz.2.543 uses autobind, please contact jreuter@yaina.de [ 143.525606][ T7981] hsr_slave_0: entered allmulticast mode [ 143.531324][ T7981] hsr_slave_1: entered allmulticast mode [ 143.553828][ T7987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 143.713421][ T7993] lo speed is unknown, defaulting to 1000 [ 143.718057][ T7994] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 143.880053][ T7994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.979714][ T7994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 144.016427][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 144.065298][ T7994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 144.074564][ T7994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 144.104875][ T8000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.164765][ T8000] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 144.216747][ T8000] bond5: (slave vcan1): Error -95 calling set_mac_address [ 144.745867][ T8036] unknown channel width for channel at 909000KHz? [ 144.914624][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 144.972666][ T8034] bridge3: entered promiscuous mode [ 144.979097][ T8034] bridge3: entered allmulticast mode [ 144.993577][ T8034] team0: Port device bridge3 added [ 145.202711][ T8050] tipc: Failed to remove unknown binding: 66,1,1/1:4047461961/4047461963 [ 145.285223][ T8046] CÃ: renamed from team_slave_0 (while UP) [ 145.314616][ T8059] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 145.358788][ T8046] netlink: 'syz.1.552': attribute type 3 has an invalid length. [ 145.375856][ T8046] netlink: 152 bytes leftover after parsing attributes in process `syz.1.552'. [ 145.421942][ T8046] A link change request failed with some changes committed already. Interface CÃ may have been left with an inconsistent configuration, please check. [ 145.503672][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 145.513370][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.555'. [ 145.595674][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 145.635621][ T8049] bond0: option primary_reselect: invalid value (3) [ 145.826884][ T8059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.008090][ T8062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.023169][ T8062] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 146.059507][ T8062] bond2: (slave vcan0): Error -95 calling set_mac_address [ 146.116183][ T8056] lo speed is unknown, defaulting to 1000 [ 146.187083][ T8081] syzkaller0: entered promiscuous mode [ 146.212301][ T8081] syzkaller0: entered allmulticast mode [ 148.584563][ T8111] lo speed is unknown, defaulting to 1000 [ 148.730460][ T8120] __nla_validate_parse: 3 callbacks suppressed [ 148.730482][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.566'. [ 148.820933][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 148.923822][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.566'. [ 148.951268][ T8129] xt_hashlimit: size too large, truncated to 1048576 [ 148.985820][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.566'. [ 149.096655][ T8136] xt_hashlimit: size too large, truncated to 1048576 [ 149.210090][ T8135] lo speed is unknown, defaulting to 1000 [ 149.233702][ T8129] : renamed from bond0 (while UP) [ 149.256666][ T8138] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 149.422421][ T8138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.479556][ T8141] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.487141][ T8141] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 149.499624][ T8141] bond5: (slave vcan1): Error -95 calling set_mac_address [ 149.988736][ T8154] bridge3: left promiscuous mode [ 150.029795][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 150.051410][ T8154] bridge3: left allmulticast mode [ 150.178798][ T5917] IPVS: starting estimator thread 0... [ 150.204695][ T8180] netlink: 'syz.1.581': attribute type 4 has an invalid length. [ 150.257785][ T8181] netlink: 'syz.1.581': attribute type 4 has an invalid length. [ 150.275796][ T8178] IPVS: using max 20 ests per chain, 48000 per kthread [ 150.324558][ T8162] bridge0: port 3(gretap0) entered blocking state [ 150.346331][ T8162] bridge0: port 3(gretap0) entered disabled state [ 150.377750][ T8162] gretap0: entered allmulticast mode [ 150.412229][ T8162] gretap0: left allmulticast mode [ 150.430177][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 150.943892][ T8195] netlink: 'syz.2.583': attribute type 33 has an invalid length. [ 151.032982][ T8195] lo: entered promiscuous mode [ 151.163207][ T8207] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 151.423726][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 151.967273][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 151.991577][ T8242] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 152.011640][ T8242] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 152.029749][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 154.120376][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 154.133069][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 154.207093][ T8257] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 154.246120][ T8257] macsec1: entered promiscuous mode [ 154.328593][ T8257] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 155.360454][ T8304] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 155.489504][ T8311] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 155.924734][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 156.072385][ T8334] netlink: 'syz.1.617': attribute type 10 has an invalid length. [ 156.126370][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.152012][ T8334] bond0: (slave team0): Enslaving as an active interface with an up link [ 156.228266][ T8341] lo speed is unknown, defaulting to 1000 [ 156.283208][ T8334] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.359588][ T8348] x_tables: duplicate underflow at hook 2 [ 156.508270][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 156.604192][ T8341] pimreg0: tun_chr_ioctl cmd 1074025677 [ 156.649982][ T8341] pimreg0: linktype set to 65534 [ 156.726308][ T8367] netlink: 'syz.1.624': attribute type 3 has an invalid length. [ 157.247721][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.270032][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.316961][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 157.425048][ T8403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.634'. [ 157.465622][ T8403] vti0: entered promiscuous mode [ 157.558405][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 158.086402][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 158.182836][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.639'. [ 158.225693][ T8439] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 159.069075][ T8472] bond0: entered promiscuous mode [ 159.095359][ T8472] bond_slave_0: entered promiscuous mode [ 159.101234][ T8472] bond_slave_1: entered promiscuous mode [ 159.119859][ T8480] netlink: 140 bytes leftover after parsing attributes in process `syz.4.652'. [ 159.148321][ T8472] team0: entered promiscuous mode [ 159.153436][ T8472] CÃ: entered promiscuous mode [ 159.159049][ T8472] team_slave_1: entered promiscuous mode [ 159.611575][ T8493] Cannot find set identified by id 0 to match [ 159.755544][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 159.772600][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 159.837876][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 159.947233][ T8505] lo speed is unknown, defaulting to 1000 [ 160.074658][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.113984][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 160.198819][ T8518] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 160.606627][ T8528] lo speed is unknown, defaulting to 1000 [ 160.698027][ T8531] lo speed is unknown, defaulting to 1000 [ 160.729834][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 161.635597][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.991942][ T8569] syzkaller0: entered promiscuous mode [ 163.998190][ T8569] syzkaller0: entered allmulticast mode [ 164.289921][ T8589] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 164.429235][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 164.439785][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.682'. [ 164.449444][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 164.468721][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 166.475004][ T8589] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 166.498411][ T8599] batadv_slave_1: entered promiscuous mode [ 166.708932][ T8606] lo speed is unknown, defaulting to 1000 [ 167.162639][ T8627] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 167.190209][ T8625] lo speed is unknown, defaulting to 1000 [ 167.249026][ T8627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.272357][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 167.318650][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 167.321877][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.692'. [ 167.366061][ T8634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.462375][ T8634] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 167.495199][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 167.502543][ T8634] bond2: (slave vcan1): Error -95 calling set_mac_address [ 167.552984][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.692'. [ 167.605937][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.692'. [ 167.758504][ T8640] lo speed is unknown, defaulting to 1000 [ 168.050667][ T8651] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 168.163873][ T8650] lo speed is unknown, defaulting to 1000 [ 168.257656][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.696'. [ 168.325888][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'. [ 168.355448][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.696'. [ 168.364435][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.696'. [ 168.394644][ T8651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.506402][ T8655] syzkaller0: entered promiscuous mode [ 168.512216][ T8655] syzkaller0: entered allmulticast mode [ 169.137610][ T8695] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 169.205983][ T8697] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 170.995251][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 171.008429][ T8692] ip6_vti0: entered promiscuous mode [ 171.013890][ T8692] ip6_vti0: entered allmulticast mode [ 171.042249][ T8695] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.076628][ T8697] macvlan2: mtu less than device minimum [ 171.575627][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.585180][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.773738][ T8721] netlink: 'syz.0.708': attribute type 39 has an invalid length. [ 172.428713][ T8752] dvmrp0: entered allmulticast mode [ 172.552772][ T8739] syz.3.713: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.625409][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.3.713 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 172.625439][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.625449][ T8739] Call Trace: [ 172.625456][ T8739] [ 172.625464][ T8739] dump_stack_lvl+0x241/0x360 [ 172.625496][ T8739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.625517][ T8739] ? __pfx__printk+0x10/0x10 [ 172.625542][ T8739] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 172.625567][ T8739] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 172.625595][ T8739] warn_alloc+0x278/0x410 [ 172.625621][ T8739] ? __pfx_warn_alloc+0x10/0x10 [ 172.625649][ T8739] ? xskq_create+0xb6/0x170 [ 172.625669][ T8739] ? __get_vm_area_node+0x1c8/0x2d0 [ 172.625696][ T8739] ? __get_vm_area_node+0x25c/0x2d0 [ 172.625732][ T8739] __vmalloc_node_range_noprof+0x62f/0x1380 [ 172.625785][ T8739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.625811][ T8739] ? __kasan_kmalloc+0x98/0xb0 [ 172.625840][ T8739] vmalloc_user_noprof+0x74/0x80 [ 172.625859][ T8739] ? xskq_create+0xb6/0x170 [ 172.625877][ T8739] xskq_create+0xb6/0x170 [ 172.625899][ T8739] xsk_init_queue+0xa1/0x100 [ 172.625921][ T8739] xsk_setsockopt+0x4aa/0x810 [ 172.625952][ T8739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.625969][ T8739] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.626001][ T8739] ? aa_sock_opt_perm+0x79/0x120 [ 172.626036][ T8739] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.626053][ T8739] do_sock_setsockopt+0x3af/0x720 [ 172.626083][ T8739] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 172.626111][ T8739] ? __fget_files+0x395/0x410 [ 172.626137][ T8739] ? __fget_files+0x2a/0x410 [ 172.626175][ T8739] __x64_sys_setsockopt+0x1ee/0x280 [ 172.626204][ T8739] do_syscall_64+0xf3/0x230 [ 172.626229][ T8739] ? clear_bhb_loop+0x35/0x90 [ 172.626260][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.626285][ T8739] RIP: 0033:0x7fe551f8d169 [ 172.626303][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.626318][ T8739] RSP: 002b:00007fe552e48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.626340][ T8739] RAX: ffffffffffffffda RBX: 00007fe5521a6160 RCX: 00007fe551f8d169 [ 172.626355][ T8739] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 172.626367][ T8739] RBP: 00007fe55200e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 172.626378][ T8739] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 172.626390][ T8739] R13: 0000000000000000 R14: 00007fe5521a6160 R15: 00007fffe6e85b68 [ 172.626423][ T8739] [ 172.626431][ T8739] Mem-Info: [ 172.885404][ T8771] __nla_validate_parse: 7 callbacks suppressed [ 172.885423][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 172.936451][ T8739] active_anon:7916 inactive_anon:0 isolated_anon:0 [ 172.936451][ T8739] active_file:1540 inactive_file:38340 isolated_file:0 [ 172.936451][ T8739] unevictable:768 dirty:156 writeback:0 [ 172.936451][ T8739] slab_reclaimable:10110 slab_unreclaimable:103373 [ 172.936451][ T8739] mapped:28939 shmem:1404 pagetables:981 [ 172.936451][ T8739] sec_pagetables:0 bounce:0 [ 172.936451][ T8739] kernel_misc_reclaimable:0 [ 172.936451][ T8739] free:1324311 free_pcp:450 free_cma:0 [ 173.115321][ T8739] Node 0 active_anon:31764kB inactive_anon:0kB active_file:6160kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115756kB dirty:620kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12524kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no [ 173.203582][ T8739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 173.335562][ T8739] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.390940][ T8739] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 173.420680][ T8739] Node 0 DMA32 free:1372732kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:31660kB inactive_anon:0kB active_file:6160kB inactive_file:152960kB unevictable:1536kB writepending:656kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:2148kB local_pcp:1316kB free_cma:0kB [ 173.474765][ T8756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.483949][ T8739] lowmem_reserve[]: 0 0 0 0 0 [ 173.491483][ T8739] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.541649][ T8756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.554414][ T8739] lowmem_reserve[]: 0 0 0 0 0 [ 173.576507][ T8739] Node 1 Normal free:3909436kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.618225][ T8739] lowmem_reserve[]: 0 0 0 0 0 [ 173.623376][ T8739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.638498][ T8739] Node 0 DMA32: 1*4kB (M) 70*8kB (ME) 97*16kB (UME) 223*32kB (UME) 274*64kB (UME) 120*128kB (UME) 52*256kB (UM) 31*512kB (UME) 11*1024kB (UM) 14*2048kB (UM) 308*4096kB (UM) = 1372836kB [ 173.655823][ T8782] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 173.658927][ T8739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.679569][ T8739] Node 1 Normal: 223*4kB (UME) 60*8kB (UME) 40*16kB (UME) 213*32kB (UME) 91*64kB (UME) 28*128kB (UME) 12*256kB (UME) 12*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909436kB [ 173.699829][ T8739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.710716][ T8739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.721714][ T8739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.735041][ T8756] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.739559][ T8739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.743715][ T8756] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.743748][ T8756] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.755310][ T8739] 41286 total pagecache pages [ 173.777028][ T8756] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.777212][ T8739] 0 pages in swap cache [ 173.791052][ T8739] Free swap = 124996kB [ 173.793852][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 173.795826][ T8739] Total swap = 124996kB [ 173.804918][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 173.809797][ T8739] 2097051 pages RAM [ 173.823323][ T8739] 0 pages HighMem/MovableOnly [ 173.828872][ T8739] 427902 pages reserved [ 173.832650][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 173.833482][ T8739] 0 pages cma reserved [ 173.909392][ T8784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 174.301956][ T8781] lo speed is unknown, defaulting to 1000 [ 174.327155][ T8782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.372730][ T8783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.393792][ T8783] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 174.408875][ T8783] bond4: (slave vcan0): Error -95 calling set_mac_address [ 174.481016][ T8792] macsec2: entered promiscuous mode [ 174.502010][ T8792] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 174.532972][ T8792] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 174.626899][ T8803] lo speed is unknown, defaulting to 1000 [ 174.720604][ T8809] lo speed is unknown, defaulting to 1000 [ 174.912380][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 174.924596][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 174.935269][ T8811] lo: left promiscuous mode [ 174.943086][ T8811] gretap0: left promiscuous mode [ 174.985859][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.327817][ T8828] lo speed is unknown, defaulting to 1000 [ 175.577786][ T8843] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 175.604613][ T8843] netlink: 'syz.2.733': attribute type 2 has an invalid length. [ 175.645769][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 176.793418][ T8900] Driver unsupported XDP return value 0 on prog (id 323) dev N/A, expect packet loss! [ 176.813974][ T8896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.744'. [ 176.892589][ T8904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.745'. [ 177.070697][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.089846][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.232941][ T8916] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.269696][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.278569][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.306049][ T8900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.397028][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 177.420526][ T8921] x_tables: duplicate underflow at hook 2 [ 177.837439][ T8937] tipc: Started in network mode [ 177.855750][ T8937] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 177.907434][ T8937] tipc: Enabling of bearer rejected, failed to enable media [ 178.189729][ T8954] xt_limit: Overflow, try lower: 262144/524288 [ 178.208080][ T8956] __nla_validate_parse: 3 callbacks suppressed [ 178.208102][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 178.440303][ T8964] netlink: 9 bytes leftover after parsing attributes in process `syz.1.756'. [ 178.698333][ T8979] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 178.756079][ T8950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.774279][ T8950] bond_slave_0: left promiscuous mode [ 178.783731][ T8950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.859580][ T8950] bond_slave_1: left promiscuous mode [ 178.906300][ T8950] bond0 (unregistering): (slave team0): Releasing backup interface [ 178.934091][ T8950] team0: left promiscuous mode [ 178.942043][ T8950] CÃ: left promiscuous mode [ 178.965297][ T8950] team_slave_1: left promiscuous mode [ 178.989746][ T8950] bond0 (unregistering): Released all slaves [ 179.070926][ T8964] 0·: renamed from hsr0 [ 179.124718][ T8964] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 179.472006][ T8999] netlink: 'syz.1.768': attribute type 8 has an invalid length. [ 179.580641][ T9006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.669850][ T9001] netlink: 'syz.1.768': attribute type 8 has an invalid length. [ 179.939604][ T9024] netlink: 148 bytes leftover after parsing attributes in process `syz.1.777'. [ 179.953073][ T9024] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 180.090308][ T9028] syzkaller0: entered promiscuous mode [ 180.090457][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.776'. [ 180.096102][ T9028] syzkaller0: entered allmulticast mode [ 182.814781][ T9054] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 182.852473][ T9054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.783'. [ 182.951155][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 183.086800][ T9067] bridge_slave_1: left allmulticast mode [ 183.138948][ T9067] bridge_slave_1: left promiscuous mode [ 183.157347][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.185036][ T9067] bridge_slave_0: left allmulticast mode [ 183.199625][ T9067] bridge_slave_0: left promiscuous mode [ 183.233088][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.520780][ T9075] netlink: 'syz.3.789': attribute type 16 has an invalid length. [ 183.529057][ T9075] netlink: 'syz.3.789': attribute type 17 has an invalid length. [ 183.595596][ T9075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.734636][ T9090] lo speed is unknown, defaulting to 1000 [ 183.780930][ T9092] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 183.904936][ T9096] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 183.948675][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 184.065288][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.794'. [ 184.095222][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 184.104289][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 184.114987][ T9099] syzkaller0: entered promiscuous mode [ 184.132430][ T9099] syzkaller0: entered allmulticast mode [ 184.164237][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 184.173728][ T9103] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 184.221416][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 184.243811][ T9092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.468856][ T30] audit: type=1804 audit(1742339423.276:6): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.798" name="/newroot/144/cgroup.controllers" dev="tmpfs" ino=757 res=1 errno=0 [ 184.515183][ T30] audit: type=1800 audit(1742339423.286:7): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.798" name="cgroup.controllers" dev="tmpfs" ino=757 res=0 errno=0 [ 186.859716][ T9096] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 186.863288][ T9094] lo speed is unknown, defaulting to 1000 [ 186.882844][ T9111] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 187.287079][ T9131] tap0: tun_chr_ioctl cmd 1074025677 [ 187.292783][ T9131] tap0: linktype set to 778 [ 187.582315][ T9140] lo speed is unknown, defaulting to 1000 [ 188.663425][ T9163] lo speed is unknown, defaulting to 1000 [ 188.915246][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 188.931612][ T9169] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 189.001614][ T9166] lo speed is unknown, defaulting to 1000 [ 189.049185][ T9169] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.065803][ T9168] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 189.091938][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.816'. [ 189.097893][ T9175] netlink: 68 bytes leftover after parsing attributes in process `syz.1.819'. [ 189.113469][ T9175] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 189.118455][ T9177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 189.173569][ T9180] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 189.183693][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 189.221735][ T9177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 189.266151][ T9176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.296588][ T9177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 189.333954][ T9176] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 189.382143][ T9176] bond8: (slave vcan1): Error -95 calling set_mac_address [ 189.704722][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 189.757547][ T9189] syzkaller0: entered promiscuous mode [ 189.763089][ T9189] syzkaller0: entered allmulticast mode [ 189.837924][ T9195] lo: entered allmulticast mode [ 189.845577][ T9195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.941721][ T9163] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 191.639501][ T5148] Bluetooth: hci1: command 0x0401 tx timeout [ 191.646494][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 191.646557][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 192.814572][ T9232] lo speed is unknown, defaulting to 1000 [ 193.165783][ T9248] lo speed is unknown, defaulting to 1000 [ 193.444687][ T9228] netlink: 88 bytes leftover after parsing attributes in process `syz.2.832'. [ 193.479901][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.832'. [ 193.490235][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'. [ 193.568357][ T9273] pim6reg: entered allmulticast mode [ 193.669279][ T9245] infiniband syz1: set down [ 193.690065][ T9245] infiniband syz1: added team_slave_0 [ 193.717564][ T9245] syz1: rxe_create_cq: returned err = -12 [ 193.776657][ T9245] infiniband syz1: Couldn't create ib_mad CQ [ 193.782894][ T9245] infiniband syz1: Couldn't open port 1 [ 194.014972][ T9293] syzkaller0: entered promiscuous mode [ 194.022825][ T9245] RDS/IB: syz1: added [ 194.044291][ T9245] smc: adding ib device syz1 with port count 1 [ 194.065466][ T9245] smc: ib device syz1 port 1 has pnetid [ 194.092958][ T9293] syzkaller0: entered allmulticast mode [ 194.288430][ T9248] x_tables: duplicate entry at hook 2 [ 194.577282][ T9315] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 194.691300][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.699560][ T9317] __nla_validate_parse: 2 callbacks suppressed [ 194.699579][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.848'. [ 194.718269][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'. [ 194.737930][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.848'. [ 194.747981][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.848'. [ 196.829880][ T9311] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.838333][ T9311] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.846771][ T9311] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.855015][ T9311] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.863507][ T9311] vxlan0: entered promiscuous mode [ 196.869002][ T9311] vxlan0: entered allmulticast mode [ 196.888119][ T9311] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.896682][ T9311] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.905520][ T9311] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.914254][ T9311] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.989865][ T9315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.026440][ T9316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.043066][ T9316] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 197.056426][ T9316] bond6: (slave vcan1): Error -95 calling set_mac_address [ 197.072925][ T9321] netlink: 'syz.2.849': attribute type 7 has an invalid length. [ 198.236681][ T9350] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.858'. [ 198.253374][ T9350] netlink: zone id is out of range [ 198.259605][ T9350] netlink: get zone limit has 8 unknown bytes [ 199.894552][ T9346] tap0: tun_chr_ioctl cmd 1074812118 [ 200.670776][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 200.850827][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 200.858992][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 200.877682][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 201.040525][ T9312] lo speed is unknown, defaulting to 1000 [ 201.078432][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 201.423902][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'. [ 201.515756][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 202.104601][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 202.186457][ T9429] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 202.218560][ T9429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.883'. [ 202.326268][ T9435] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 202.494584][ T9446] netlink: 'syz.0.888': attribute type 2 has an invalid length. [ 202.666470][ T9458] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 202.700234][ T9448] syzkaller0: entered promiscuous mode [ 202.716902][ T9448] syzkaller0: entered allmulticast mode [ 202.750310][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.890'. [ 202.770746][ T9451] lo speed is unknown, defaulting to 1000 [ 205.736333][ T9494] veth1_to_team: entered promiscuous mode [ 206.411327][ T9521] lo speed is unknown, defaulting to 1000 [ 206.557287][ T9526] syzkaller0: entered promiscuous mode [ 206.579683][ T9526] syzkaller0: entered allmulticast mode [ 206.629666][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.910'. [ 206.666218][ T9532] bond0: entered promiscuous mode [ 206.678326][ T9532] bond_slave_0: entered promiscuous mode [ 206.688433][ T9532] bond_slave_1: entered promiscuous mode [ 206.694556][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.911'. [ 206.733857][ T9532] batadv0: entered promiscuous mode [ 206.763179][ T9532] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 206.776726][ T9532] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 206.788094][ T9532] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 206.819398][ T9532] bond0: left promiscuous mode [ 206.824995][ T9532] bond_slave_0: left promiscuous mode [ 206.847753][ T9532] bond_slave_1: left promiscuous mode [ 206.913816][ T9532] batadv0: left promiscuous mode [ 207.298314][ T9550] netlink: 'syz.0.915': attribute type 4 has an invalid length. [ 207.332561][ T9528] netlink: 64 bytes leftover after parsing attributes in process `syz.4.908'. [ 209.452805][ T9528] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.485544][ T9528] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.518470][ T9528] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.542598][ T9528] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.808524][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.920'. [ 209.834402][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.920'. [ 209.852301][ T9568] bridge5: entered promiscuous mode [ 209.859738][ T9568] bridge5: entered allmulticast mode [ 210.703582][ T9603] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 210.746169][ T9601] lo speed is unknown, defaulting to 1000 [ 210.818418][ T9603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.907048][ T9612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.986415][ T9603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 210.992673][ T9612] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 211.056526][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 211.061475][ T9612] bond5: (slave vcan0): Error -95 calling set_mac_address [ 211.130701][ T9603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 211.135626][ T9623] IPv6: Can't replace route, no match found [ 211.143823][ T9603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 211.430124][ T9634] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 211.930274][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'. [ 212.068612][ T9649] syzkaller0: entered promiscuous mode [ 212.074499][ T9649] syzkaller0: entered allmulticast mode [ 212.143023][ T9663] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 213.165277][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 215.870683][ T9722] bridge4: entered allmulticast mode [ 216.097066][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 216.131953][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 216.164434][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 216.799244][ T9769] lo speed is unknown, defaulting to 1000 [ 216.879419][ T9777] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.972'. [ 216.900690][ T9772] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.972'. [ 216.919132][ T9777] netlink: 'syz.3.972': attribute type 2 has an invalid length. [ 216.969864][ T9777] fþ: entered promiscuous mode [ 217.121557][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 217.154510][ T9783] netlink: 'syz.2.977': attribute type 30 has an invalid length. [ 217.245794][ T9791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.257622][ T9783] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.266301][ T9783] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.274561][ T9783] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.283248][ T9783] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.295450][ T9793] netlink: 'syz.2.977': attribute type 16 has an invalid length. [ 217.303958][ T9794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.979'. [ 217.326363][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 217.336796][ T9793] netlink: 'syz.2.977': attribute type 17 has an invalid length. [ 217.350805][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 217.649755][ T9800] lo speed is unknown, defaulting to 1000 [ 218.527938][ T9834] netlink: 332 bytes leftover after parsing attributes in process `syz.1.993'. [ 218.819887][ T9846] pim6reg: entered allmulticast mode [ 218.842825][ T9839] pim6reg: left allmulticast mode [ 218.991411][ T9853] pimreg0: tun_chr_ioctl cmd 1074025677 [ 218.997306][ T9853] pimreg0: linktype set to 65534 [ 219.022943][ T9850] lo speed is unknown, defaulting to 1000 [ 219.574883][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 219.706020][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 220.349687][ T9900] IPVS: set_ctl: invalid protocol: 21 224.0.0.2:0 [ 220.535211][ T9912] lo speed is unknown, defaulting to 1000 [ 220.542379][ T9905] lo speed is unknown, defaulting to 1000 [ 220.737391][ T9917] lo: left allmulticast mode [ 220.818766][ T9917] ip6_vti0: left promiscuous mode [ 220.824429][ T9917] ip6_vti0: left allmulticast mode [ 221.004129][ T9917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.060836][ T9917] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.071907][ T9917] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.081124][ T9917] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.090387][ T9917] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.128584][ T9917] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.138049][ T9917] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.146543][ T9917] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.155036][ T9917] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.166267][ T9917] 0·: left allmulticast mode [ 221.171060][ T9917] hsr_slave_0: left allmulticast mode [ 221.178818][ T9917] hsr_slave_1: left allmulticast mode [ 221.184858][ T9917] macvlan2: left promiscuous mode [ 221.191697][ T9917] macvlan2: left allmulticast mode [ 221.201930][ T9917] vti0: left promiscuous mode [ 221.600086][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 222.223248][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 222.245253][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1028'. [ 222.301674][ T9964] netlink: 'syz.0.1030': attribute type 12 has an invalid length. [ 222.318513][ T9964] netlink: 'syz.0.1030': attribute type 4 has an invalid length. [ 222.867227][ T9979] lo speed is unknown, defaulting to 1000 [ 222.947416][ T9981] lo speed is unknown, defaulting to 1000 [ 223.044788][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 223.097318][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 223.428629][T10007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1042'. [ 223.671465][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 223.872472][T10015] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1045'. [ 224.185028][T10021] netlink: 'syz.2.1046': attribute type 6 has an invalid length. [ 224.267402][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 224.456290][T10034] pimreg: entered allmulticast mode [ 224.672573][T10036] pimreg: left allmulticast mode [ 225.086963][T10043] bond4 (unregistering): Released all slaves [ 225.180002][T10050] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 225.224660][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 225.515494][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 226.035339][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 226.395733][T10081] netlink: 'syz.0.1060': attribute type 9 has an invalid length. [ 226.658225][T10085] lo speed is unknown, defaulting to 1000 [ 226.710851][T10087] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 226.956046][T10087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.006466][T10089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.020734][T10089] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 227.070840][T10089] bond4: (slave vcan1): Error -95 calling set_mac_address [ 227.629716][T10106] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 227.743791][T10111] __nla_validate_parse: 5 callbacks suppressed [ 227.743815][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 228.058040][ T9970] Set syz1 is full, maxelem 65536 reached [ 228.190852][T10116] lo speed is unknown, defaulting to 1000 [ 228.226281][T10119] Unsupported ieee802154 address type: 0 [ 228.286190][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 228.709135][T10130] lo speed is unknown, defaulting to 1000 [ 228.798974][T10136] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 228.904664][T10136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.974778][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 229.000822][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1077'. [ 229.047732][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1077'. [ 229.049139][T10140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.108894][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1077'. [ 229.136115][T10140] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 229.194473][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1077'. [ 229.232891][T10140] bond6: (slave vcan0): Error -95 calling set_mac_address [ 229.763571][T10174] lo speed is unknown, defaulting to 1000 [ 229.786975][T10175] netlink: 'syz.4.1087': attribute type 11 has an invalid length. [ 229.840287][T10175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1087'. [ 229.859387][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 230.238451][T10193] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1093'. [ 230.554145][T10203] sctp: [Deprecated]: syz.2.1095 (pid 10203) Use of int in max_burst socket option deprecated. [ 230.554145][T10203] Use struct sctp_assoc_value instead [ 230.593179][T10201] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 231.130120][T10215] wg1: left promiscuous mode [ 231.134923][T10215] wg1: left allmulticast mode [ 231.211444][T10215] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.222188][T10215] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.232167][T10215] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.245376][T10215] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.296752][ T26] lo speed is unknown, defaulting to 1000 [ 231.307928][T10216] gretap1: entered promiscuous mode [ 231.496259][T10224] lo speed is unknown, defaulting to 1000 [ 232.468301][T10256] RDS: rds_bind could not find a transport for 8002:0:40::, load rds_tcp or rds_rdma? [ 232.765834][T10269] __nla_validate_parse: 3 callbacks suppressed [ 232.765854][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 232.814592][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1112'. [ 232.838649][T10274] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 233.061497][T10282] netlink: 'syz.0.1115': attribute type 7 has an invalid length. [ 233.093935][T10282] veth4: entered allmulticast mode [ 233.263394][T10287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1117'. [ 233.975422][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 233.984576][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'. [ 234.086495][T10315] netlink: 'syz.3.1125': attribute type 11 has an invalid length. [ 234.094565][T10315] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1125'. [ 234.242931][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 234.265339][T10319] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 234.273146][T10319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 234.363201][T10325] lo speed is unknown, defaulting to 1000 [ 234.414994][T10327] tap0: tun_chr_ioctl cmd 1074025677 [ 234.431307][T10327] tap0: linktype set to 1 [ 234.611377][T10333] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1131'. [ 234.637116][T10333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1131'. [ 234.784568][T10333] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 235.122548][T10346] tun0: tun_chr_ioctl cmd 2147767520 [ 235.354784][T10359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.453742][T10359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.470749][T10363] lo speed is unknown, defaulting to 1000 [ 235.553639][T10359] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.588929][T10359] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.599582][T10363] lo speed is unknown, defaulting to 1000 [ 235.722812][T10366] pim6reg1: entered promiscuous mode [ 235.732741][T10366] pim6reg1: entered allmulticast mode [ 235.852978][T10359] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.923747][T10359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 235.932084][T10363] lo speed is unknown, defaulting to 1000 [ 235.964859][T10359] 8021q: adding VLAN 0 to HW filter on device bond11 [ 235.975924][T10363] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 236.001977][T10363] lo speed is unknown, defaulting to 1000 [ 238.320588][T10359] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 238.322426][T10363] lo speed is unknown, defaulting to 1000 [ 238.364534][T10363] lo speed is unknown, defaulting to 1000 [ 238.395300][T10363] lo speed is unknown, defaulting to 1000 [ 238.443458][T10363] lo speed is unknown, defaulting to 1000 [ 238.640589][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 238.702220][T10391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1145'. [ 239.019681][T10405] lo speed is unknown, defaulting to 1000 [ 239.056530][T10415] sit0: entered promiscuous mode [ 239.061670][T10415] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 239.160904][T10415] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1151'. [ 239.479110][T10427] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.618545][T10427] lo speed is unknown, defaulting to 1000 [ 239.706962][T10433] netlink: 'syz.3.1156': attribute type 11 has an invalid length. [ 239.726338][T10433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1156'. [ 239.750851][T10405] lo speed is unknown, defaulting to 1000 [ 240.013106][T10427] lo speed is unknown, defaulting to 1000 [ 240.470011][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'. [ 240.589461][T10446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 241.044566][T10462] SET target dimension over the limit! [ 241.345375][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 241.354440][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 241.383069][T10473] x_tables: duplicate underflow at hook 1 [ 241.518391][T10475] lo speed is unknown, defaulting to 1000 [ 241.814593][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1173'. [ 241.839528][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1173'. [ 242.018776][T10475] lo speed is unknown, defaulting to 1000 [ 242.024921][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 242.096008][T10496] bond11: entered promiscuous mode [ 242.124836][T10496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 242.448216][T10496] bond11 (unregistering): Released all slaves [ 242.759223][T10521] 8021q: VLANs not supported on sit0 [ 242.802628][T10527] pim6reg: entered allmulticast mode [ 242.848811][T10526] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 243.115353][T10534] netlink: 'syz.2.1186': attribute type 30 has an invalid length. [ 243.145701][T10533] netlink: 'syz.2.1186': attribute type 30 has an invalid length. [ 243.606612][T10552] pim6reg1: entered promiscuous mode [ 243.612082][T10552] pim6reg1: entered allmulticast mode [ 243.713332][T10556] xt_CT: No such helper "pptp" [ 243.996245][T10565] __nla_validate_parse: 3 callbacks suppressed [ 243.996267][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 244.012262][T10565] dummy0: Device is already in use. [ 244.255401][T10572] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1199'. [ 244.277129][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 244.315653][T10577] lo speed is unknown, defaulting to 1000 [ 244.791707][T10600] sctp: [Deprecated]: syz.4.1209 (pid 10600) Use of int in max_burst socket option deprecated. [ 244.791707][T10600] Use struct sctp_assoc_value instead [ 244.954279][T10603] netlink: 'syz.3.1210': attribute type 3 has an invalid length. [ 244.996626][T10577] lo speed is unknown, defaulting to 1000 [ 245.149349][T10611] lo speed is unknown, defaulting to 1000 [ 245.340914][T10620] @ÿ: renamed from bond_slave_0 [ 245.499797][T10611] lo speed is unknown, defaulting to 1000 [ 245.803921][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.811635][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.962669][ T5916] IPVS: starting estimator thread 0... [ 245.975969][T10628] batadv_slave_1: left promiscuous mode [ 246.115770][T10637] IPVS: using max 20 ests per chain, 48000 per kthread [ 246.122881][T10628] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.138443][T10628] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.175427][T10628] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.205900][T10628] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.346683][T10628] bridge5: left promiscuous mode [ 246.351893][T10628] bridge5: left allmulticast mode [ 246.365670][T10628] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.374314][T10628] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.383219][T10628] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.391735][T10628] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.711338][T10667] lo speed is unknown, defaulting to 1000 [ 249.733197][T10668] lo speed is unknown, defaulting to 1000 [ 250.033212][T10668] lo speed is unknown, defaulting to 1000 [ 250.232895][T10723] [ 250.235303][T10723] ====================================================== [ 250.242358][T10723] WARNING: possible circular locking dependency detected [ 250.249431][T10723] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted [ 250.256543][T10723] ------------------------------------------------------ [ 250.263581][T10723] syz.1.1231/10723 is trying to acquire lock: [ 250.269651][T10723] ffff888079854d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 250.279283][T10723] [ 250.279283][T10723] but task is already holding lock: [ 250.286662][T10723] ffff88805ef78e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 250.296222][T10723] [ 250.296222][T10723] which lock already depends on the new lock. [ 250.296222][T10723] [ 250.306637][T10723] [ 250.306637][T10723] the existing dependency chain (in reverse order) is: [ 250.315744][T10723] [ 250.315744][T10723] -> #2 (team->team_lock_key){+.+.}-{4:4}: [ 250.323841][T10723] lock_acquire+0x1ed/0x550 [ 250.328973][T10723] __mutex_lock+0x19c/0x1010 [ 250.334270][T10723] team_set_mac_address+0x122/0x280 [ 250.339996][T10723] netif_set_mac_address+0x327/0x510 [ 250.345899][T10723] do_setlink+0xaa6/0x40f0 [ 250.350848][T10723] rtnl_newlink+0x15a6/0x1d90 [ 250.356081][T10723] rtnetlink_rcv_msg+0x791/0xcf0 [ 250.361681][T10723] netlink_rcv_skb+0x206/0x480 [ 250.366991][T10723] netlink_unicast+0x7f6/0x990 [ 250.372297][T10723] netlink_sendmsg+0x8de/0xcb0 [ 250.377592][T10723] __sock_sendmsg+0x221/0x270 [ 250.382819][T10723] __sys_sendto+0x363/0x4c0 [ 250.387872][T10723] __x64_sys_sendto+0xde/0x100 [ 250.393184][T10723] do_syscall_64+0xf3/0x230 [ 250.398225][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.404655][T10723] [ 250.404655][T10723] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 250.413281][T10723] lock_acquire+0x1ed/0x550 [ 250.418319][T10723] __mutex_lock+0x19c/0x1010 [ 250.423458][T10723] dev_set_mac_address+0x2a/0x50 [ 250.428982][T10723] bond_set_mac_address+0x28e/0x830 [ 250.434713][T10723] netif_set_mac_address+0x327/0x510 [ 250.440716][T10723] do_setlink+0xaa6/0x40f0 [ 250.445659][T10723] rtnl_newlink+0x15a6/0x1d90 [ 250.450963][T10723] rtnetlink_rcv_msg+0x791/0xcf0 [ 250.456455][T10723] netlink_rcv_skb+0x206/0x480 [ 250.461746][T10723] netlink_unicast+0x7f6/0x990 [ 250.467039][T10723] netlink_sendmsg+0x8de/0xcb0 [ 250.472335][T10723] __sock_sendmsg+0x221/0x270 [ 250.477554][T10723] ____sys_sendmsg+0x53a/0x860 [ 250.482853][T10723] __sys_sendmsg+0x269/0x350 [ 250.488142][T10723] do_syscall_64+0xf3/0x230 [ 250.493170][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.499589][T10723] [ 250.499589][T10723] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 250.508040][T10723] validate_chain+0x18ef/0x5920 [ 250.513688][T10723] __lock_acquire+0x1397/0x2100 [ 250.519164][T10723] lock_acquire+0x1ed/0x550 [ 250.524214][T10723] __mutex_lock+0x19c/0x1010 [ 250.529342][T10723] __dev_open+0x5cb/0x8a0 [ 250.534235][T10723] netif_open+0xae/0x1b0 [ 250.539207][T10723] dev_open+0x13e/0x260 [ 250.543976][T10723] team_add_slave+0xabe/0x28a0 [ 250.549273][T10723] do_set_master+0x579/0x730 [ 250.554385][T10723] do_setlink+0xfee/0x40f0 [ 250.559326][T10723] rtnl_newlink+0x15a6/0x1d90 [ 250.564551][T10723] rtnetlink_rcv_msg+0x791/0xcf0 [ 250.570037][T10723] netlink_rcv_skb+0x206/0x480 [ 250.575333][T10723] netlink_unicast+0x7f6/0x990 [ 250.580623][T10723] netlink_sendmsg+0x8de/0xcb0 [ 250.585916][T10723] __sock_sendmsg+0x221/0x270 [ 250.591206][T10723] ____sys_sendmsg+0x53a/0x860 [ 250.596502][T10723] __sys_sendmsg+0x269/0x350 [ 250.601619][T10723] do_syscall_64+0xf3/0x230 [ 250.606827][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.613252][T10723] [ 250.613252][T10723] other info that might help us debug this: [ 250.613252][T10723] [ 250.623656][T10723] Chain exists of: [ 250.623656][T10723] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key [ 250.623656][T10723] [ 250.638895][T10723] Possible unsafe locking scenario: [ 250.638895][T10723] [ 250.646367][T10723] CPU0 CPU1 [ 250.651729][T10723] ---- ---- [ 250.657091][T10723] lock(team->team_lock_key); [ 250.661862][T10723] lock(&dev_instance_lock_key#12); [ 250.669678][T10723] lock(team->team_lock_key); [ 250.676991][T10723] lock(&dev_instance_lock_key#2); [ 250.682208][T10723] [ 250.682208][T10723] *** DEADLOCK *** [ 250.682208][T10723] [ 250.690380][T10723] 2 locks held by syz.1.1231/10723: [ 250.695576][T10723] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 250.704648][T10723] #1: ffff88805ef78e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 250.714858][T10723] [ 250.714858][T10723] stack backtrace: [ 250.720846][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.1.1231 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 250.720866][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.720876][T10723] Call Trace: [ 250.720884][T10723] [ 250.720893][T10723] dump_stack_lvl+0x241/0x360 [ 250.720915][T10723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.720930][T10723] ? __pfx__printk+0x10/0x10 [ 250.720948][T10723] print_circular_bug+0x13a/0x1b0 [ 250.720966][T10723] check_noncircular+0x36a/0x4a0 [ 250.720984][T10723] ? __pfx_check_noncircular+0x10/0x10 [ 250.721001][T10723] ? lockdep_lock+0x123/0x2b0 [ 250.721025][T10723] validate_chain+0x18ef/0x5920 [ 250.721048][T10723] ? __pfx_validate_chain+0x10/0x10 [ 250.721063][T10723] ? stack_trace_save+0x118/0x1d0 [ 250.721084][T10723] ? mark_lock+0x9a/0x360 [ 250.721099][T10723] ? __lock_acquire+0x1397/0x2100 [ 250.721125][T10723] ? mark_lock+0x9a/0x360 [ 250.721139][T10723] __lock_acquire+0x1397/0x2100 [ 250.721165][T10723] lock_acquire+0x1ed/0x550 [ 250.721185][T10723] ? __dev_open+0x5cb/0x8a0 [ 250.721209][T10723] ? __pfx_lock_acquire+0x10/0x10 [ 250.721229][T10723] ? lockdep_rtnl_is_held+0x26/0x40 [ 250.721247][T10723] ? __pfx___might_resched+0x10/0x10 [ 250.721265][T10723] ? bond_update_slave_arr+0x2dc/0xd50 [ 250.721285][T10723] __mutex_lock+0x19c/0x1010 [ 250.721303][T10723] ? __dev_open+0x5cb/0x8a0 [ 250.721323][T10723] ? ib_device_get_by_netdev+0x595/0x5e0 [ 250.721345][T10723] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 250.721361][T10723] ? __dev_open+0x5cb/0x8a0 [ 250.721381][T10723] ? __pfx___mutex_lock+0x10/0x10 [ 250.721405][T10723] __dev_open+0x5cb/0x8a0 [ 250.721427][T10723] ? __pfx___dev_open+0x10/0x10 [ 250.721449][T10723] ? ref_tracker_alloc+0x332/0x490 [ 250.721464][T10723] netif_open+0xae/0x1b0 [ 250.721484][T10723] ? __pfx_netif_open+0x10/0x10 [ 250.721508][T10723] dev_open+0x13e/0x260 [ 250.721524][T10723] team_add_slave+0xabe/0x28a0 [ 250.721548][T10723] ? __pfx_team_add_slave+0x10/0x10 [ 250.721566][T10723] ? __dev_notify_flags+0x316/0x400 [ 250.721581][T10723] ? dev_set_rx_mode+0xb8/0x2e0 [ 250.721596][T10723] ? __pfx___dev_notify_flags+0x10/0x10 [ 250.721611][T10723] ? __dev_change_flags+0x515/0x6f0 [ 250.721627][T10723] ? __pfx___dev_change_flags+0x10/0x10 [ 250.721642][T10723] ? validate_linkmsg+0x828/0xa40 [ 250.721661][T10723] ? mutex_is_locked+0x17/0x50 [ 250.721677][T10723] do_set_master+0x579/0x730 [ 250.721694][T10723] do_setlink+0xfee/0x40f0 [ 250.721714][T10723] ? mark_lock+0x9a/0x360 [ 250.721728][T10723] ? __pfx_do_setlink+0x10/0x10 [ 250.721742][T10723] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.721781][T10723] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.721803][T10723] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 250.721819][T10723] ? lockdep_hardirqs_on+0x99/0x150 [ 250.721837][T10723] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.721853][T10723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.721871][T10723] ? rcu_is_watching+0x15/0xb0 [ 250.721888][T10723] ? __mutex_lock+0xba3/0x1010 [ 250.721906][T10723] ? __mutex_lock+0x602/0x1010 [ 250.721926][T10723] ? rtnl_newlink+0xc4c/0x1d90 [ 250.721948][T10723] ? __pfx___mutex_lock+0x10/0x10 [ 250.721968][T10723] ? nla_strscpy+0x100/0x180 [ 250.721984][T10723] ? full_name_hash+0x93/0xe0 [ 250.722008][T10723] rtnl_newlink+0x15a6/0x1d90 [ 250.722029][T10723] ? is_bpf_text_address+0x285/0x2a0 [ 250.722042][T10723] ? is_bpf_text_address+0x26/0x2a0 [ 250.722059][T10723] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.722087][T10723] ? validate_chain+0x11e/0x5920 [ 250.722103][T10723] ? __pfx_lock_acquire+0x10/0x10 [ 250.722124][T10723] ? __pfx_lock_release+0x10/0x10 [ 250.722145][T10723] ? __pfx_validate_chain+0x10/0x10 [ 250.722161][T10723] ? mark_lock+0x9a/0x360 [ 250.722176][T10723] ? __lock_acquire+0x1397/0x2100 [ 250.722206][T10723] ? __pfx_lock_release+0x10/0x10 [ 250.722231][T10723] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.722252][T10723] rtnetlink_rcv_msg+0x791/0xcf0 [ 250.722273][T10723] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 250.722294][T10723] ? __lock_acquire+0x1397/0x2100 [ 250.722315][T10723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.722341][T10723] netlink_rcv_skb+0x206/0x480 [ 250.722363][T10723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.722384][T10723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.722412][T10723] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.722433][T10723] netlink_unicast+0x7f6/0x990 [ 250.722455][T10723] ? __pfx_netlink_unicast+0x10/0x10 [ 250.722473][T10723] ? __virt_addr_valid+0x45f/0x530 [ 250.722487][T10723] ? __phys_addr_symbol+0x2f/0x70 [ 250.722500][T10723] ? __check_object_size+0x47a/0x730 [ 250.722521][T10723] netlink_sendmsg+0x8de/0xcb0 [ 250.722546][T10723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.722569][T10723] ? aa_sock_msg_perm+0x91/0x160 [ 250.722592][T10723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.722612][T10723] __sock_sendmsg+0x221/0x270 [ 250.722634][T10723] ____sys_sendmsg+0x53a/0x860 [ 250.722654][T10723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.722669][T10723] ? __fget_files+0x2a/0x410 [ 250.722690][T10723] ? __fget_files+0x2a/0x410 [ 250.722713][T10723] __sys_sendmsg+0x269/0x350 [ 250.722729][T10723] ? __pfx_futex_wake+0x10/0x10 [ 250.722751][T10723] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.722787][T10723] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.722808][T10723] ? do_syscall_64+0x100/0x230 [ 250.722828][T10723] ? do_syscall_64+0xb6/0x230 [ 250.722847][T10723] do_syscall_64+0xf3/0x230 [ 250.722866][T10723] ? clear_bhb_loop+0x35/0x90 [ 250.722887][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.722907][T10723] RIP: 0033:0x7f53e918d169 [ 250.722921][T10723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.722935][T10723] RSP: 002b:00007f53e9fb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.722953][T10723] RAX: ffffffffffffffda RBX: 00007f53e93a6080 RCX: 00007f53e918d169 [ 250.722964][T10723] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 250.722974][T10723] RBP: 00007f53e920e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.722984][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.722993][T10723] R13: 0000000000000000 R14: 00007f53e93a6080 R15: 00007ffc6358d1c8 [ 250.723009][T10723] [ 251.341815][T10723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.373596][T10723] team0: Port device bond0 added [ 251.425009][T10667] lo speed is unknown, defaulting to 1000 [ 256.117565][ T1299] ieee802154 phy1 wpan1: encryption failed: -22